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Coming  Soon 


eTrust 

Security  Portal 


Function:  Offers  a  single 
view  for  managing  online 
security  processes 


Beta:  Undetermined; 
demo  planned  at  CA 
World  next  month 


To  access  recent 
coverage  of  CA, 
visit  our  Web  site: 

www.computerworld.com/q7a1640 


CA  Confronts  User  Anger, 
Reveals  Web  Portal  nan 

Kumar  talks  candidly  about  Computer  Associates’  hard-nosed  reputation,  says 
CA  will  introduce  portals  for  security  and  storage  management  at  CA  World 


BY  MARC  L.  SONGINI, 
DON  TENNANT  AND 
MARYFRAN  JOHNSON 

ISLANDIA,  N.Y. 

Last  week 
Comput¬ 
er  Asso¬ 
ciates  International 
Inc.’s  headquarters 
here.  President  and 
CEO  Sanjay  Kumar 
spoke  at  length 
with  Computer- 
world  about  CA’s 
historically  stormy 
relationship  with 


its  customers  and  the  recently 
initiated  federal  investigations 
into  changes  CA  has  made  in 
at  I  its  financial  accounting  and 
reporting  practices. 
Excerpts  from  that 
interview  follow: 

In  light  of  the  problems 
CA  has  confronted  over 
the  past  year,  what  are 
you  going  to  tell  your 
users  at  this  year’s  CA 
SANJAY  KUMAR,  CA’s  World?  There  has  al- 
president  and  CEO  Kumar,  page  61 


BY  MARC  L.  SONGINI 

ISLANDIA,  N.Y. 

Computer  Associates  Interna¬ 
tional  Inc.  is  preparing  to  ease 
the  pain  for  users  running  het¬ 
erogeneous  storage  and  securi¬ 
ty  management  appli¬ 
cations.  And  CA  says  it 
will  do  so  without 
forcing  them  to  buy  into  its 
Unicenter  enterprise  systems 
management  platform. 

Executives  last  week  told 
Computerworld  that  CA  is 
readying  the  rollout  of  stand- 


CA  WORLD 


alone  Web  portal  software 
for  centralized  storage  and 
security  management.  The 
plan  will  be  detailed  at  the 
company’s  annual  user  con¬ 
ference  next  month.  CA 
also  plans  to  make 
announcements  at 
CA  World  regard¬ 
ing  its  relationship  with  its 
customers,  but  company  of¬ 
ficials  didn’t  elaborate  be¬ 
yond  conveying  a  strategic 
direction  (see  Q&A  at  left). 

CA  World,  page  61 


MAINFRAME  SKILLS, 
PA^  AT  A  PREMIUM 


Experienced  workers 
nearing  retirement  age 


BY  JULIA  KING 

IT  managers  looking  to  cut  la¬ 
bor  costs  during  the  ongoing 
recession  might  want  to  think 
twice  before  laying  off  any  of 
their  workers  who  have  main¬ 


frame  or  data  center  skills. 

With  mainframe  shipments 
on  the  rise  and  legions  of  tradi¬ 
tional  mainframe  IT  workers 
nearing  retirement  age,  tech¬ 
nology  managers  last  week 
said  it’s  becoming  increasingly 
difficult  and  costly  to  replace 
employees  who  have  deep  ex¬ 
perience  in  Cobol,  CICS  and 


other  mainframe  technologies. 

For  example,  the  Workplace 
Safety  and  Insurance  Board  of 
Ontario  is  shelling  out  10%  to 
15%  signing  bonuses  to  new 
workers  with  mainframe  skills. 
The  Toronto-based  board, 
which  oversees  workplace 
safety  and  workers’  compensa¬ 
tion  issues  for  the  province  of 
Ontario,  also  pays  “hot  skills” 
premiums  to  mainframe  ex¬ 
perts.  That  can  boost  their  an¬ 
nual  salaries  by  as  much  as 
10%,  said  David  Londry,  direc¬ 
tor  of  the  board’s  corporate  in¬ 
formation  center. 

At  the  Automobile  Club  of 
Southern  California,  a  Costa 
Mesa,  Calif.-based  affiliate  of 
Heathrow,  Fla.-based  AAA 
(formerly  known  as  the  Ameri¬ 
can  Automobile  Association), 
IT  manager  Bill  Reinl  said  he’s 
Mainframe  Skills,  page  16 


CEOs  and  CFOs  are  continually  asking  their 
IT  leaders  to  come  up  with  brilliant  ideas  for 
slashing  costs,  pumping  up  sales  or  improving 
productivity.  Here’s  a  look  at  three  hard-chargers 
who  have  delivered.  Stories  begin  on  page  28, 
and  also  see  related  editorial,  page  24. 


AT  ONE  TIME,  DATA  STORAGE 


$ed  on  comparably  confi 


products. 


AND  AT  ONE  TIME,  THIS 


Sun 


Sun  Microsystems,  the  SunTogoySun  StorEdgnand  Solaris  are  trademarks 


or  registered  trademarks  of  Sun  Microsystems,  Inc.  in 


f 

JUST  MEANT  HAVING  A  BOX. 

WAS  A  WICKED  HAIRCUT. 

Introducing  Sun’s  complete  storage  solutions.  A  new  approach  | 

to  storage  that  can  make  you  look  pretty  sharp. 

In  today’s  complex,  data-hungry  IT  environment,  storage  has  to  be  a  lot  more  than  just  a  box.  You  need  your  storage  to  be  an 
integrated  part  of  your  entire  IT  infrastructure.  How  are  you  going  to  get  there?  With  complete  storage  solutions  from  Sun.  By 
thinking  about  your  IT  infrastructure  as  a  whole,  you  can  reduce  complexity  throughout  your  enterprise.  And  with  Sun  StorEdge" 
this  practical  approach  to  storage  now  exists.  All  of  Sun’s  new  storage  products  -  software,  hardware  and  services  -  are  part  of 
Sun’s  end-to-end  IT  infrastructure.  And  all  of  our  products  are  optimized  for  the  Solaris'Operating  Environment,  yet  open  to 
heterogeneous  environments.  Everything  can  now  work  as  one.  And  that  means  more  utilization  of  your  storage  resources,  with 
unparalleled  uptime  and  a  lower  cost  of  ownership,  even  if  you’re  on  a  multi-vendor  system. 


Software 

With  the  new  Sun  StorEdge  software  suites, 
you  have  complete  control  over  all  your 
storage  resources: 


Systems 

Our  storage  systems,  ranging  from  the 
workgroup  to  the  data  center,  are  optimized 
to  your  environment: 


Services 

Sun’s  services  team  can  help  you  build  a 
storage  environment  that’s  custom-fit  to 
your  enterprise. 


Availability  Suite:  for  increased  uptime  and 
rapid  recovery  from  disasters. 

Utilization  Suite:  so  you  can  uncover  every 
nook  and  cranny  of  available  storage. 

Resource  Management  Suite:  lets  you 
proactively  manage  your  storage  capacity. 

Performance  Suite:  provides  quick  data 
access,  continually  protected  information 
and  our  new  next-generation  file  system. 


Industry-Leading  Scalability 


Traditional  file  systems  Sun  QFS  &  SAM  ■  FS 


New  Sun  StorEdge  3900  series:  delivers  the 
best  high-performance  computing  available. 

4x  the  Bandwidth* 


New  Sun  StorEdoe  6900  series:  integrated 
virtualization  technology  lets  you  pool 
every  last  byte  of  storage  capacity  and 
share  it  across  multiple  systems,  so  you 
can  consolidate  all  your  storage  resources. 

The  Sun  StorEdge  9900  series:  simply  delivers 
best-in-class  storage  performance,  five-9s 
availability  and  connectivity  for  your 
mission-critical  data  center. 


Because  our  focus  isn’t  limited  to  storage, 
you  can  benefit  from  our  comprehensive 
understanding  of  the  interdependence 
between  your  storage,  servers,  software 
and  the  network. 

We  can  also  provide  handy  assistance  on 
everything  from  general  consulting  and 
implementation  to  the  finer  points  of  data 
management  planning. 

Finally,  because  we  know  prevention  is 
the  best  medicine,  we  offer  Sun  StorEdge 
Remote  Response:  pre-emptive  support 
that  gives  you  round-the-clock  monitoring 
of  your  storage. 

You  get  everything  you  need  to  maximize 
your  return  and  minimize  your  costs. 


'  \ 

Storage  for  Solaris"  or  a  heterogeneous  environment?  Why  not  both? 

If  you're  already  using  Sun’s  rock-solid  servers  and  award-winning  Solaris  Operating  Environment  (rated  the  #1  OE  by 
D.H.  Brown  Associates),  you  can  be  sure  that  Sun  StorEdge  is  optimized  to  get  the  most  out  of  your  storage  resources. 
And  if  your  environment  includes  other  operating  systems  and  server  platforms  (such  as  NT,  Linux  or  AIX),  our  open 
solutions  will  make  your  storage  work  harder  and  smarter. 


For  more  information  on  Sun’s  complete  storage  solutions,  all  you  have  to  do  is  take  the  first  step. 
Visit  www.sun.com/sunstorage,  or  contact  your  Sun  representative. 


microsystems 


How  the  world’s  largest  sporting  event  reached  its  networking  goals. 

Billions  of  people  will  be  watching  every  kick  of  the  FIFA  World  Cup™.  And  with  massive  amounts  of  mission-critical  voice 

and  data  communication  generated  in  just  four  weeks,  even  the  smallest  glitch  is  a  huge  problem.  That's  why  they 

' 

chose  Avaya  to  build  one  of  the  world’s  largest  converged  networks.  Protected  by  a  VPN  firewall  that  blocks 
intrusions  without  slowdowns,  it's  one  of  the  most  secure  and  reliable  networks  available.  Plus,  it’s  all  backed  by  our 
highly  skilled  global  services  team.  So  10,000  voice  and  data  devices,  and  hundreds  of  switches  and  routers  won’t  be 
caught  unguarded.  For  a  white  paper  detailing  how  Avaya  is  powering  the  FIFA  World  Cup™,  visit  avaya.com/nowtwo. 


■ 


2002 


FIFA  WORLD  CUP 

I^oreaJapan 


AVAyA 

Official  Partner 


2  IB 


MIND  YOUR  MANNERS 

This  week’s  QuickStudy  topic  is 
netiquette,  or  how  we  should 
behave  when  we’re  communicat¬ 
ing  over  the  Internet.  PAGE  48 


SMOOTH  SAILING 

When  Tom  Murphy  (left)  arrived 
as  CIO  at  Royal  Caribbean  Cruises 
in  April  1999,  he  inherited  an  IT 
department  that  was  in  disarray. 
Opposing  “mafias”  controlled  the 
data  center  and  networking  groups, 
and  the  business  units  had  no  con¬ 
fidence  in  IT.  Two  years  later, 
everything  has  changed.  PAGE  30 
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NEWS  6 


SPECIAL  NEWS  REPORT 


SEPT.  11:  After  Six 
Months,  IT  Is  Key 

6  Those  spearheading  IT  volun¬ 
teer  efforts  never  want  to  be 
caught  off  guard  again. 

7  Wall  Street  firms  begin  moving 
their  IT  operations  out  of  Manhat¬ 
tan  to  avoid  a  recurrence. 

8  Critical  infrastructure  protection 
becomes  a  top  priority  for  the  pub¬ 
lic  and  private  sectors. 

10  Corporate  privacy  managers 

acknowledge  that  they  have  a  long 
way  to  go  to  get  privacy  policies  in 
place  and  to  ensure  compliance. 

12  Microsoft  is  filling  a  glaring 
midmarket  hole  by  moving  into  the 
CRM  space,  say  analysts. 

14  Attendees  at  last  week’s  BEA 
user  conference  receive  promises 
of  more  tightly  integrated  middle¬ 
ware  products. 


BUSINESS  27 

27  Paul  A.  Strassmann  says 

many  methodologies  aimed  at  cal¬ 
culating  the  alignment  between  IT 
and  business  units  don’t  add  up. 

36  DiversITy:  Women  in  IT  who 
bump  up  against  perceived  gender 
barriers  typically  take  one  of  two 
approaches  to  the  problem,  writes 
Kathleen  Melymuka.  They  either 
whine  about  them  or  see  the  barri¬ 
ers  as  challenges  and  fight  to  over¬ 
come  them. 

38  Career  Adviser  Fran  Quittel 
offers  advice  to  an  IT  professional 
who  is  preparing  for  a  layoff  and  to 
a  veteran  mainframe  programmer 
who  has  updated  his  skills  in  areas 
such  as  Visual  Basic  and  Java  but 
has  had  trouble  getting  in  the  door 
at  other  companies. 

38  Workstyles:  Phil  Go,  cio  at 

Barton  Malow  Co.,  talks  about 
what  it’s  like  to  work  in  IT  at  the 
$1  billion  construction  manage¬ 
ment  firm. 


TECHNOLOGY  39 

39  Nicholas  Petreley  takes  a 

skeptical  look  at  the  impact  on 
Web  services  from  Microsoft’s 
.Net  initiative. 

40  Field  Report:  Network- 
attached  storage  is  becoming  a 
serious  top-down  enterprise  stor¬ 
age  resource. 

44  Emerging  Technologies:  The 

iSCSI  standard  is  paving  the  way 
for  IP-based  storage-area  net¬ 
works,  and  the  new  standard  will 
battle  with  Fibre  Channel  for  data 
center  supremacy. 

46  Hands  On:  Virtual  machines 
that  can  concurrently  host  multiple 
operating  systems  may  dramatical¬ 
ly  reduce  your  backup  equipment 
and  software  costs. 

50  Security  Journal:  a  token- 

based  access  system  proposed  by 
Mathias  Thurman  faces  opposition 
from  the  network  engineers  at  his 
company. 


OPINIONS  24 

24  Patricia  Keefe  says  that  it 
professionals  are  being  called  upon 
to  do  things  that  are  heroic  —  be  it 
at  work  or  in  their  communities. 
The  big  question  for  this  year  is: 
What  have  you  done  for  me  lately? 

24  Pimm  Fox  writes  that  enter¬ 
prise  portals  can  help  the  bottom 
line,  but  they  aren’t  integration 
tools,  and  they  require  clear,  goal- 
oriented  planning. 

25  David  Foote  contends  that, 

amid  the  Enron  fallout,  the  only 
way  to  enforce  ethical  behavior  is 
to  hire  the  right  people. 

62  Frank  Hayes  says  a  “best  prac¬ 
tices”  proposal  —  for  telling  a  soft¬ 
ware  vendor  of  a  product  security 
flaw  and  giving  the  vendor  time  to 
fix  it  —  is  itself  flawed. 
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NAS  TIPS 

After  reading  our  Field  Report  on 
network-attached  storage  on  page 
40,  go  online  for  NAS  installation 
tips  and  an  extensive  resource  list. 

www.computerwortd.com/q7a1610 


COULD  LINUX  RULE? 

If  Microsoft  falls  off  its  operating 
system  peak,  does  Linux  have  what 
it  takes  to  become  the  desktop 
operating  system  of  choice?  Post 
your  thoughts  and  read  what  others 
have  to  say  in  our  forum. 
www.computerworid.com/q7a1630 


A  CASE  FOR  CLOSED 
SECURITY 

Now  that  Microsoft  has  vowed  to 
improve  the  security  of  its  prod¬ 
ucts,  it  should  trade  its  security 
add-ons  and  afterthoughts  for  a 
new  philosophy  based  on  a  closed 
security  model,  Computerworld 
editor  Robert  L.  Mitchell  writes  in 
our  security  community. 
www.computerworld.com/security 


E-MAIL  NEWSLETTERS 

Don’t  forget  to  sign  up  for  our  free 
e-mail  newsletters.  You  can  get 
news  updates  twice  daily,  as  well  as 
weekly  or  biweekly  roundups  about 
subjects  ranging  from  security  to 
storage. 

www.computerworld.com/q7a1430 


For  breaking  news,  updated  twice 
daily,  visit  Compulerworld.com: 

www.com(kJt8rwortd.cofTi/q,((4000 
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NEWSSIX  MONTHS  LATER 


Efforts  Afoot  to  Coordinate  IT 
Volunteer  Work  After  Disasters 


Many  tech  needs 
yet  to  be  addressed 

BY  MELISSA  SOLOMON 

fter  recovering 
from  the  shock  of 
Sept.  11,  Julie  Gan- 
dle  decided  to  do 
her  part  to  aid  the 
recovery  efforts. 

She  told  a  Park  Avenue  emer¬ 
gency  relief  center  volunteer 
that  she  had  18  computers  and 
two  weeks  of  man-hours  to  do¬ 
nate  from  her  New  York-based 
IT  infrastructure  support  firm, 
Work  Friendly  Solutions.  “The 
poor  woman  looked  at  me  and 
said  she  didn’t  even  know  how 
to  use  a  computer,”  said  Gandle. 

As  the  devastation  of  Sept. 
11  unfolded,  IT  professionals 
worldwide  recognized  the  data 
and  infrastructure  implica¬ 
tions  and  stepped  forward  to 
offer  their  expertise.  But  while 
relief  agencies  were  ready  with 
food,  shelter  and  counseling 
services,  no  one  seemed  to  be 
prepared  to  harness  the  collec¬ 
tive  IT  manpower  and  put  it  to 
systematic  use. 

“You  would  think  in  New 
York  City  2001  that  there’s  a 
whole  portable  unit  that  can 
drop  down  in  two  hours  with 
PalmPilots.  That  doesn’t  hap¬ 
pen,”  Gandle  said. 

Within  weeks,  a  few  groups 
emerged  to  lead  the  business 


and  IT  recovery  efforts.  With 
help  from  thousands  of  volun¬ 
teers  like  Gandle,  they  accom¬ 
plished  a  great  deal.  But  six 
months  later,  many  feel  that 
much  more  could  have  been 
done.  So  IT  and  business  lead¬ 
ers  are  now  streamlining  their 
efforts  to  tackle  long-term 
needs  and  ensure  that  they’re 
never  caught  off-guard  again. 

“It  was  chaos,”  said  Maria 
Gotsch,  director  of  Restart 
Central,  an  organization  jointly 
operated  by  the  New  York  City 
Partnership  and  the  city  and 


state  economic  development 
offices  to  channel  donated 
goods  and  services  to  business¬ 
es  affected  by  the  attacks.  “We 
had  every  problem,  every  situa¬ 
tion  that  a  start-up  has.” 

John  Williamson,  a  laid-off 
IT  worker,  said  he  tried  unsuc¬ 
cessfully  to  volunteer.  “We 
should  have  had  some  direc¬ 
tion,  some  leadership,”  said 
Williamson,  who  created  one 
of  many  Web  sites  compiling 
volunteer  opportunities.  “But 
when  you  tried  to  step  up  to 
the  plate,  you  got  pushed  aside. 


A  Push  for  One  Voice 

Among  the  fog  of  events  after  Sept. 
11,  one  phone  call  stands  out  for 
James  Paddon,  chief  financial  offi¬ 
cer  at  Lava  Trading  Inc.,  a  trading- 
floor  software  firm  that  was  on  the 
83rd  floor  of  1  World  Trade  Center. 

The  call  was  from  from  a  woman 
at  Restart  Central,  an  organization 
created  to  help  businesses  rebuild 
after  the  attacks.  Since  then,  Pad¬ 
don  has  worked  with  Restart  Cen¬ 
tral  volunteer  Alison  Burke  to  line 
up  office  furniture  and  equipment 
and  re-establish  telecommunica¬ 


tions  networks.  “It’s  really  been  a 
tremendous  resource  for  us,”  said 
Paddon.  who’s  still  working  with  the 
organization. 

Restart  Central  has  matched  more 
than  1,000  businesses  with  $3.2  mil¬ 
lion  worth  of  donated  goods.  It's  still 
working  with  about  340  firms,  said 
Maria  Gotsch,  the  organization’s  co¬ 
ordinator. 

Volunteers  offered  assistance  to 
those  who  contacted  city  and  state 
emergency  hot  lines  or  walk-in  cen¬ 
ters.  They  gathered  donated  re¬ 
sources  and  entered  the  names  of 
volunteers  and  affected  companies 


into  a  database.  They  then  assigned 
qualified  volunteers  to  work  individu¬ 
ally  with  businesses  to  rebuild  their 
infrastructures,  explained  Burke. 

Julie  Coppernoll,  technical  assis¬ 
tant  to  the  chairman  of  Intel  Corp., 
testified  about  her  experiences  with 
Restart  Central  at  a  December  Sen¬ 
ate  hearing  to  create  a  national  emer¬ 
gency  technology  guard.  Coppernoll 
said  she  felt  the  “one-voice  concept" 
made  sense. 

“[Restart  Central  was]  definitely  a 
leader.  There's  no  question  about 
that,"  she  said. 

-  Melissa  Solomon 


It  seemed  politics  stepped  into 
it  pretty  quickly.” 

Relief  coordinators  said  the 
volume  of  assistance  was  heart¬ 
ening,  but  the  offers  of  help  far 
exceeded  the  demand.  And  in 
the  first  few  months  after  Sept. 
11,  their  attention  was  focused 
on  helping  those  with  emer¬ 
gency  needs. 

But  “there  are  still  needs,” 
said  Barbara  Chang,  executive 
director  of  NPower  NY,  a  non¬ 
profit  organization  that  pro¬ 
vides  IT  assistance  to  other 
nonprofits  in  the  city. 

A  February  update  to  a  study 
commissioned  by  the  New  York 
City  Partnership  in  November 
found  that  the  economic  impact 
from  the  attacks  is  meeting  ini¬ 
tial  projections  of  $83  billion  in 
damage  to  the  city’s  economy. 

Many  businesses  are  starting 
to  move  into  permanent  office 
space,  build  up  their  long-term 
infrastructures  and  apply  for 
grants  and  loans,  said  Ronna 
Brown,  president  of  The  Better 
Business  Bureau  of  New  York, 
which  held  forums  in  Novem¬ 
ber  and  January  to  coordinate 
relief  efforts. 

To  address  long-term  plan¬ 
ning,  Ron  Wyden  (D-Ore.), 
chairman  of  the  Senate  Sub¬ 
committee  on  Science,  Technol¬ 
ogy  and  Space,  has  been  work¬ 
ing  to  create  a  national  emer¬ 
gency  technology  guard.  His 
plan  is  to  form  a  chain  of  com¬ 
mand  to  coordinate  the  science 
and  technology  sectors  to  pre¬ 
vent  and  respond  to  disasters. 

“There  was  such  an  outpour¬ 
ing  of  support,”  said  Wyden’s 
press  secretary,  Carol  Guthrie. 
“Even  more  might  have  been 
accomplished  if  there  was  a 
clear  organization  in  place.”  I 


Businesses  affected  by  the  at¬ 
tacks  or  those  who  would  like 
to  volunteer  or  donate  equip¬ 
ment  to  businesses  in  need  can 
complete  an  NPower  NY  relief 
form  at  www.npowerny.org/ 
Index_re.html  or  contact  Re¬ 
start  Central  at  (866)  227-0458 
or  www.restartcentral.org. 


How  IT  Pros 
Helped  Out 

It  took  three  tense  days  for 
TripleHop  Technologies  Inc.,  an 
enterprise  search-and-retrieval 
software  firm  that  was  on  the 
53rd  floor  of  the  World  Trade 
Center,  to  learn  that  all  of  its 
employees  were  safe  and  ac¬ 
counted  for. 

Then  TripleHop’s  managers 
turned  their  attention  to  the 
business.  Thanks  to  its  backup 
site,  the  firm  restored  its  e-mail 
server  almost  immediately,  and 
it  lost  only  about  a  month’s 
worth  of  software  development 
work,  said  Chief  Technology 
Officer  Joaquin  Delgado.  But 
all  of  its  equipment  was  gone. 

Fortunately,  word  of  IT  do¬ 
nations  and  volunteers  spread 
quickly.  Several  organizations, 
including  Computenvorld,  cre¬ 
ated  volunteer  databases  and 
passed  names  along  to  relief 
agencies  assisting  affected 
businesses.  Since  January, 
those  who  volunteered  through 
Computerworld’ s  database 
have  been  sharing  stories 
about  how  they  helped  out. 

Shortly  after  TripleHop 
moved  into  its  new  space  on 
West  25th  Street,  it  connected 
with  New  York-based  About 
Inc.,  which  gave  TripleHop  sev¬ 
eral  computers,  a  fax  machine, 
a  printer  and  even  a  microwave. 

“They  were  perfect  for  our 
needs,”  said  Delgado.  “Without 
those  computers,  we  would 
have  lost  a  lot  of  business.” 

About,  which  runs  an  online 
information  network,  also  do¬ 
nated  spare  space  in  its  offices 
and  gave  free  phones  and  In¬ 
ternet  connectivity  to  W-tech- 
nologies  Inc.,  a  wireless  busi¬ 
ness  left  homeless  after  the  at¬ 
tacks,  said  Luc  LaFontan  vice 
president  of  corporate  technol¬ 
ogy  at  About. 

“The  best  way  you  can  fight 
against  what  happened  is  to  be 
on  your  feet  again  [and]  to  get 
the  economy  going  again,"  Del¬ 
gado  said. 

-  Melissa  Solomon 
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Financial  Firms  Plan  Widely  Dispersed  IT  Operations 


Aiming  to  avoid  big 
losses,  some  move 
out  of  Manhattan 

BY  LUCAS  MEARIAN 

NEW  YORK 

In  the  wake  of  the  Sept.  11  at¬ 
tacks,  financial  services  execu¬ 
tives  are  putting  more  stock  in 
employees’  ability  to  work  from 
remote  locations  using  virtual 
private  networks,  and  they’re 
widening  the  gap  between  of¬ 
fice  locations  to  mitigate  the 
impact  of  future  disasters. 

In  some  cases,  that  means 
companies  are  moving  their  of¬ 
fices  and  IT  operations  out  of 
New  York  City  and  into  sur¬ 
rounding  suburbs. 

Merrill  Lynch  &  Co.,  for  in- 


We  need  to  be  able 
to  react  to  a  disaster 
...  but  more  important 
is  we  need  to  mitigate 
the  loss  of  a  single  site. 

GREGORY  FERRIS. 

EXECUTIVE  DIRECTOR, 
GLOBAL  BUSINESS  CONTINUITY 
PLANNING,  MORGAN  STANLEY 


stance,  is  moving  its  primary 
data  center  from  Manhattan  to 
Staten  Island,  which  is  on  a  dif¬ 
ferent  power  grid,  according  to 
Marvin  Balliet,  first  vice  presi¬ 
dent  and  chief  financial  officer 
of  the  firm’s  technology  group. 

Another  big  Wall  Street  firm 
that’s  pulling  up  at  least  some 
of  its  stakes  is  Morgan  Stanley 
Dean  Witter  &  Co.,  which  was 
in  the  process  of  completing  a 
new  1  million-square-foot  of¬ 
fice  tower  in  New  York  last 
year  but  sold  the  32-story 
building  to  Lehman  Brothers 
Holdings  Inc.  in  October. 

Instead,  Morgan  Stanley  an¬ 
nounced  plans  in  January  to 
purchase  the  former  Chevron- 
Texaco  Corp.  headquarters  in 
Harrison,  N.Y.,  about  27  miles 
north  of  its  current  offices. 

Gregory  Ferris,  executive  di¬ 
rector  of  global  business  conti¬ 
nuity  planning  at  Morgan  Stan¬ 
ley,  said  the  threat  of  future  at¬ 
tacks  was  the  primary  reason 
for  the  bank’s  change  of  heart. 

“We  need  to  be  able  to  react 
to  a  disaster . . .  but  more  impor¬ 
tant  is  we  need  to  mitigate  the 
loss  of  a  single  site,”  said  Ferris, 
one  of  the  speakers  at  the  Secu¬ 
rities  Industry  Association’s 
Internet  Trends  and  Strategy 
Conference  held  here  last  week. 

With  its  primary  spaces  at 
1585  Broadway  and  745  Seventh 
Ave.,  the  firm’s  trading  and 


backup  facilities  would  be  con¬ 
centrated  in  two  buildings  lo¬ 
cated  within  a  city  block  of 
each  other  and  dependent  on 
the  same  transportation  and 
power  infrastructures. 

Ferris  added  that  an  expan¬ 
sion  in  so-called  dark  fiber  net¬ 
works  —  optical  fiber  net¬ 
works  that  aren’t  currently  be¬ 
ing  used  —  is  making  the  de¬ 
centralization  of  staffs  and 


data  centers  easier  today  be¬ 
cause  of  increased  bandwidth. 

William  James,  chief  tech¬ 
nology  officer  for  Bank  of 
America  Corp.’s  broker/dealer 
services  unit,  said  his  company 
is  implementing  a  dark  fiber 
network  to  connect  data  cen¬ 
ters  in  California,  Texas,  North 
Carolina  and  New  Jersey  in  a 
two-year,  multimillion-dollar 
project  he  expects  to  be  com¬ 


pleted  sometime  next  year.  The 
network  will  be  used  for  disas¬ 
ter  recovery  as  well  as  backups. 

Currently,  Bank  of  America 
uses  leased  T3  lines  at  a  “sub¬ 
stantial  cost”  to  load-balance 
servers  among  data  centers  for 
disaster  recovery. 

“There’s  a  one-third  reduc¬ 
tion  in  cost  by  [using  disaster 
recovery  servers  for  load  bal¬ 
ancing]  vs.  having  all  your  dis¬ 
aster  recovery  boxes  in  the 
same  data  center.  They’re  there 
just  as  space  heaters  that  aren’t 
being  used,”  James  said.  I 


Wall  Street  Seeks  Cyberterror  Defenses 


The  most  effective  way  to  deal  with 
the  twin  threats  posed  by  hackers 
and  cyberterrorists,  say  many  Wall 
Street  IT  executives,  is  to  form  a 
unified  effort  between  the  private 
sector  and  government  to  create  a 
central  communications  platform 
to  alert  and  disseminate 
information  about  such 
attacks  using  a  private 
Web  site. 

A  panel  made  up  of 
representatives  from  the  U.S.  Secret 
Service,  the  National  Infrastructure 
Protection  Center  and  the  Rnancial 
Services  Information  Sharing  and 
Analysis  Center  (FS/ISAC)  pressed 
attendees  at  a  Securities  industry  As¬ 
sociation  cyberterrorism  workshop  in 
New  York  last  week  to  work  toward 
sharing  information  within  the  finan¬ 
cial  industry  and  with  law  enforce¬ 
ment  about  probes  and  attacks  on 
firms'  technology  infrastructures. 


The  FS/ISAC,  a  private  organiza¬ 
tion  in  New  York,  charges  compa¬ 
nies  a  minimum  $7,000  annual  fee 
for  alerts  and  access  to  information 
about  hacking  and  cyberterrorism 
threats.  Stanley  Jarocki,  vice  presi¬ 
dent  of  IT  security  engineering  at 
Morgan  Stanley  Dean  Wit¬ 
ter  and  chairman  of  the 
FS/ISAC,  said  cyberterror¬ 
ists  supported  by  govern¬ 
ments  have  almost  unlimit¬ 
ed  resources  to  do  damage  to  Wall 
Street’s  IT  infrastructure. 

Jarocki  said  firms  should  either 
join  the  FS/ISAC’s  service  or  create 
a  secure,  central  Web  site  through 
which  they  can  share  information 
anonymously  with  one  another. 

C.  Warren  Axelrod,  director  of  in¬ 
formation  security  at  the  Pershing 
Division  of  Donaldson,  Lufkin  & 
Jenrette  Securities  Corp.  in  Jersey 
City,  N.J.,  pointed  out  that  the  great¬ 


est  cyberterrorism  threats  come 
from  “someone  infiltrating  your  or¬ 
ganization  and  using  that  power  to 
do  damage." 

“The  way  firms  can  protect  them¬ 
selves  is  to  share  the  information 
with  each  other  without  broadcast¬ 
ing  it,”  Axelrod  said. 

Bob  Weaver,  an  agent  of  the  Se¬ 
cret  Service’s  New  York  Electronic 
Crimes  Task  Force,  agreed.  He  said 
almost  70°/o  of  the  more  than  900 
people  the  Secret  Service  has  ar¬ 
rested  in  New  York  in  connection 
with  intranet  attacks  are  considered 
insider  threats.  He  recommended 
that  companies  adopt  background 
checks  for  employees  based  on  the 
sensitivity  of  an  individual’s  position 
within  the  organization. 

“On  the  backside  of  this  is  negli¬ 
gence  suits  by  insurance  companies 
based  on  the  fact  that  you  didn’t 
have  due  diligence  or  best  practices 
in  place,”  Weaver  said. 

-  Lucas  Mearian 


Lasers  Eyed  as  Medium  for 
Disaster  Communications 


BY  LUCAS  MEARIAN 

NEW  YORK 

Companies  near  ground  zero 
in  New  York  learned  some 
painful  lessons  in  the  after- 
math  of  the  Sept.  11  attacks,  not 
the  least  of  which  is  how  to 
communicate  when  telephone 
lines  and  Internet  service  pro¬ 
viders  are  down. 

One  answer  was  in  the  14th- 
story  window  of  the  lower 
Manhattan  headquarters  of  fi¬ 
nancial  services  law  firm  Cad- 


walader,  Wickersham  &  Taft 
on  that  fateful  day:  a  small 
black  box  that  emits  a  laser 
beam  transmitting  data  at  1G 
bit/sec.  to  a  secondary  office 
site  across  the  street. 

After  the  terrorist  attacks, 
New  York-based  Verizon  Com¬ 
munications’  phone  and  data 
lines  running  under  the  World 
Trade  Center  were  cut  and 
couldn’t  be  rerouted  for  days. 
Meanwhile,  Cadwalader’s  laser 
beam  kept  transmitting  docu¬ 


ments,  financial  information 
and  e-mails  —  at  least  when 
employees  were  allowed  to 
use  their  computers  when  gen¬ 
erators  were  the  sole  source 
of  power. 

The  laser  beam  “kept  work¬ 
ing,  even  through  all  the  smoke 
and  ashes  from  the  fallout,” 
said  Greta  Ostrovitz,  Cad¬ 
walader’s  director  of  technolo¬ 
gy.  “Had  we  put  in  telephone 
lines  with  similar  speed,  it 
would  have  cost  us  $6,000  per 
month.  This  [laser]  cost  us 
$48,000  one  time.” 

The  laser  was  installed  three 
years  ago  by  manufacturer 
LightPointe  Communications 
Inc.  in  San  Diego.  LightPointe’s 
laser  systems  provide  campus¬ 


like  networking  for  distances 
spanning  about  2.5  miles  in 
metropolitan  areas  and  speeds 
ranging  from  about  2M  bit/sec. 
to  622M  bit/sec. 

“Maybe  once  or  twice  a  year 
we  adjust  the  alignment,  but 
that  takes  two  or  three  min¬ 
utes,”  Ostrovitz  said. 

“It  is  virtually  flaw¬ 
less.” 

The  system  allows 
all  types  of  network¬ 
ing  protocols  —  in¬ 
cluding  Synchronous 
Optical  Network  ring 
closures,  Gigabit  Eth¬ 
ernet  access,  DS3  ser¬ 
vices  and  Gigabit  Eth¬ 
ernet  LAN-to-LAN  — 
to  be  transmitted  at 


full  networking  speeds. 

In  addition,  the  laser  sys¬ 
tems  can  be  deployed  in  a  mat¬ 
ter  of  hours  without  the  need 
for  a  long-term,  leased  wired 
or  fiber  connections. 

Merrill  Lynch  &  Co.  has  set 
up  a  similar  data-transmitting 
laser  pointing  from 
its  Vesey  Street  of¬ 
fice  towers  across 
the  Hudson  River  to 
an  alternate  site  in 
New  Jersey.  Merrill 
Lynch  spokeswoman 
Selena  Morris  said 
the  laser  was  in¬ 
stalled  in  direct  re¬ 
sponse  to  losing 
communications  on 
Sept.  11. 1 


OSTROVITZ:  Laser 
beam  transmitted 
data  despite  sur¬ 
rounding  debris. 
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Digital  Destruction 
Was  Worst  Imaginable 

Extent  of  cyber  infrastructure  devastation 
on  Sept.  11  unprecedented,  officials  say 


BY  DAN  VERTON 

WASHINGTON 

or  several  tense 
hours  on  Sept.  11, 
the  nation  was  deaf, 
dumb  and  blind  due 
to  the  “absolutely 
massive”  loss  of  communica¬ 
tions  infrastructure  resulting 
from  the  collapse  of  the  World 
Trade  Center,  a  senior  govern¬ 
ment  official  said  last  week. 

While  those  losses  pale  in 
comparison  to  the  human  trag¬ 
edy,  federal  and  industry  offi¬ 
cials  for  the  first  time  painted 
a  frightening  picture  of  what 
the  terrorist  attacks  did  to  the 
U.S.  telecommunications  infra¬ 
structure  that  fateful  day  and 
revealed  just  how  fragile  the 
nation’s  economic  digital  back¬ 
bone  can  be. 

According  to  officials  at  the 
homeland  security  conference 
here  last  week,  sponsored  by 
the  Fairfax,  Va.-based  Armed 
Forces  Communications  and 
Electronics  Association,  the 
collapse  of  the  World  Trade 
Center  towers  in  New  York  in¬ 
flicted  severe  damage  on  one  of 
the  most  critical  telecommuni¬ 
cations  nodes  in  the  country: 
the  main  regional  switching 
center  operated  by  Verizon 
Communications  at  140  West 
St.,  adjacent  to  World  Trade 
Center  7,  which  collapsed. 

The  resulting  devastation 
was  “the  most  significant  chal¬ 
lenge  that  the  National  Com¬ 
munications  System  had  ever 
seen,”  said  Brenton  Greene, 
deputy  manager  at  the  Nation¬ 
al  Communications  System 
(NCS),  which  is  responsible 
for  all  the  major  telecommuni¬ 
cations  networks  that  have  na- 


For  more  on  the  role 
of  technology  when 
disasters  hit,  visit 
our  Web  site: 

www.computerworld.com/q727650 


tional  security  significance. 

In  addition  to  the  immediate 
wireless  circuit  overload,  the 
collapse  of  the  towers  sent 
a  massive  steel  beam  slicing 
through  a  bundle  of  critical 
fiber  cables  buried  eight  feet 
below  ground,  destroying  more 
than  4  million  high-speed  ac¬ 
cess  lines  and  rupturing  water 
lines  that  filled  underground 
switching  vaults  with  more 
than  10  million  gallons  of  water. 

The  damage  knocked  out  1.5 
million  circuits  that  served  the 


Wireless  systems 
vulnerable  to  jams 

BY  BOB  BREWIN 

Following  an  FBI  terrorism 
alert  issued  in  January,  munici¬ 
pal  and  publicly  owned  water 
systems  around  the  country 
have  started  to  boost  the  secu¬ 
rity  of  wireless  data  systems 
that  control  their  distribution 
networks. 

The  FBI’s  National  Infra¬ 
structure  Protection  Center 
didn’t  publicly  release  the  con¬ 
tents  of  the  warning,  but  water 
utility  executives  confirmed 
that  they  were  alerted  that 
Osama  bin  Laden’s  Qaeda  ter¬ 
rorist  network  had  extensively 
researched  their  systems  on 
the  Web. 

Utilities,  including  water  sys¬ 
tems,  use  wireless  Supervisory 
Control  and  Data  Acquisition 
(SCADA)  networks  to  control 
all  aspects  of  their  distribution 
systems,  such  as  electric  trans- 


financial  district,  threatening 
the  country’s  economic  stabil¬ 
ity,  said  Greene. 

The  Verizon  facility  housed 
enough  equipment  to  make  it 
the  “most  communications- 
intensive  area  in  the  U.S.,”  said 
Bruce  Fleming,  divisional  tech¬ 
nology  officer  at  New  York- 
based  Verizon. 

Virtual  Army  Fights  Back 

That  fact  wasn’t  lost  on  the 
Bush  administration,  Greene 
said.  Once  emergency  response 
and  rescue  efforts  were  given 
the  support  they  required,  the 
White  House  ordered  Greene 
to  make  restoring  Wall  Street 
connectivity  the  next  priority. 


mission  lines  and  substations, 
water  pipelines,  storage  tanks 
and  pumps.  These  networks 
can  control  myriad  pumps, 
pipelines  and  reservoirs  in  a 
large  water  distribution  system. 

Jill  Lyon,  general  counsel  of 
the  Washington-based  United 
Telecom  Council  (UTC),  which 
represents  the  telecommunica¬ 
tions  interests  of  utilities  with 
federal  regulatory  bodies,  said 
her  organization  has  met  with 
the  Office  of  Homeland  De¬ 
fense  and  other  agencies  to  dis¬ 
cuss  potential  vulnerabilities  in 
SCADA  systems. 

Lyon  said  one  of  her  biggest 
concerns  is  the  potential  jam¬ 
ming  of  wireless  SCADA  sys¬ 
tems,  which  operate  in  the  900- 
MHz  frequency  band.  She  said 
SCADA  systems  in  that  band, 
which  is  also  home  to  cellular 
systems,  cordless  phones  and 
unlicensed  fixed  wireless  oper¬ 
ators,  are  already  subject  to  un¬ 
intentional  “harmful  interfer¬ 
ence”  from  authorized  users  in 
the  band.  Because  of  those 


Restoring  the  Verizon  back¬ 
bone,  however,  would  require 
a  virtual  army  of  federal  and 
industry  technicians.  Primary 
power  had  been  lost,  and  back¬ 
up  power,  which  was  running 
on  diesel  fuel  generators,  be¬ 
gan  to  fade  quickly. 

Lucent  Technologies  Inc.  in 
Murray  Hill,  N.J.,  one  of  Veri¬ 
zon’s  main  systems  providers, 
rushed  a  100,000-line  switch  to 
the  scene  to  replace  another 
massive  switch  that  had  been 
sent  crashing  through  the  win¬ 
dow  of  the  Verizon  building. 
The  company  also  put  all  of  its 
customer  requirements  on  hold 
and  made  its  entire  inventory 
available  to  rescue  services, 
said  Greg  Butler,  a  Verizon  vice 
president  who  coordinated  in¬ 
cident  response  efforts. 

In  addition  to  the  damage 
incurred  by  Verizon,  at  least 
139  fiber  rings  in  surrounding 
buildings  and  26  building-spe¬ 
cific  fiber  rings  failed,  said  Dick 


SCADA  Security 

■  FBI  warns  of  Web  research  by  Osama 
bin  Laden’s  Qaeda  organization  into  water 
company  data  networks. 

■  Wireless  SCADA  networks  are  suscepti¬ 
ble  to  jamming. 

■  Some  Web  sites  contain  maps  of  distrib¬ 
ution  systems  and  SCADA  networks. 

■  Costly  private  fiber-optic  nets  could  help 
resolve  wireless  security  problems. 

issues,  she  is  concerned  about 
the  ability  of  an  adversary  to 
intentionally  jam  SCADA  net¬ 
works,  she  said. 

Such  jamming  could  poten¬ 
tially  allow  a  foe  to  turn  pumps 
on  or  off,  “start  a  fire  and  then 
shut  down  the  water  system,” 
depriving  firefighters  of  the 
water  they  would  need  to  com¬ 
bat  the  fire,  Lyon  said. 

Jerry  Obrist,  UTC  chairman 
and  chief  engineer  for  the  Lin¬ 
coln  Water  System  in  Nebraska, 
said  he,  too,  is  concerned  about 
wireless  SCADA  systems  oper¬ 
ating  in  bands  allocated  to  the 
utility  industry. 

Obrist  said  water  utilities 
might  eventually  be  forced 
to  encrypt  all  data  on  their 
SCADA  systems  and  may  have 
to  consider  shifting  their 


Lessons  Learned 
From  the  Trenches 

Consider  how  you  will  get 
replacement  supplies,  equip¬ 
ment  and  personnel  to  disaster 
sites  when  planes  can’t  fly, 
bridges  are  closed  and  other 
transportation  is  unavailable. 

Eliminate  single  points  of 
failure.  Nasdaq  avoided 
interruption  in  operations  by 
distributing  transaction  nodes. 

Distribute  storage  and  backup 
data,  especially  configuration 
information. 


Price,  vice  president  of  field 
operations  at  WorldCom  Inc. 

“From  a  macro  level,  our 
national  security  should  be  a 
major  part  of  our  telecommu¬ 
nications  policy,”  said  Fleming. 
“If  it  can  happen,  it  hasn’t  hap¬ 
pened  yet.”  > 


SCADA  networks  to  private 
fiber-optic  systems,  which  are 
less  susceptible  to  jamming  or 
hacking  than  wireless  net¬ 
works.  Obrist  said  water  utili¬ 
ties  also  need  to  remove  all 
information  about  SCADA  sys¬ 
tems  from  publicly  accessible 
Web  sites  to  prevent  the  kind 
of  intelligence-gathering  the 
FBI  warned  about. 

Sheila  Strehle,  a  spokes¬ 
woman  for  city-owned  Seattle 
Public  Utilities,  said  that  in  the 
past  few  months,  the  depart¬ 
ment  has  removed  all  informa¬ 
tion  about  SCADA  systems 
from  its  Web  site,  as  well  as 
maps  detailing  the  water  sys¬ 
tem’s  infrastructure  and  details 
of  certain  capital  spending  proj¬ 
ects.  It  currently  operates  what 
Strehle  described  as  a  “low- 
tech”  SCADA  system  but  is  de¬ 
veloping  a  network  with  in¬ 
creased  security  requirements. 

Investor-owned  San  Jose 
Water  Co.,  which  serves  Silicon 
Valley,  has  also  added  security 
upgrades  since  September  to 
its  wireless  SCADA  network, 
said  spokesman  Dick  Balocco.  B 

To  learn  more  about 
SCADA  networks, 
visit  our  Web  site  for 
links  to  resources: 

www.computerworld.com/q727704 


Water  Systems  Improve  Net 
Security  After  FBI  Warning 
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New  Enterprise  CRM  from  salesforce.com.  Time  for  success. 

The  days  of  waiting  to  finish  an  expensive  and  risky  enterprise  CRM  deployment  are  over.  Why  pay  for 
expensive  software  and  hardware,  lengthy  implementations  and  costly  consulting?  New  Enterprise  CRM 
from  salesforce.com  immediately  answers  all  your  needs  while  delivering  where  it  counts  -  your  bottom  line. 
Over  3,800  companies  have  already  learned  this  lesson  including  Adobe,  Dow  Jones  Newswires,  Fujitsu, 
Siemens  and  USA  Today.  Where  do  you  want  to  spend  your  time?  On  your  business  or  on  software? 

salesforce.com 

#1CRM.  Online.  Offline. 

Call  I.800.N0 SOFTWARE  or  visit  www.salesforce.com 

and  enter  promo  code  DV0321  for  a  FREE  TEST  DRIVE ! 


©  2002  salesforce.com 
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Microsoft,  DOJ  Revise 
Antitrust  Settlement 

Microsoft  Corp.  and  the  U.S.  De¬ 
partment  of  Justice  (DOJ)  revised 
their  proposed  antitrust  case  settle¬ 
ment  in  advance  of  a  court  hearing 
scheduled  for  Wednesday.  Most  of 
the  changes  were  intended  to  better 
define  terms  and  to  close  potential 
loopholes.  Microsoft  also  agreed  to 
delete  a  clause  that  critics  claimed 
could  have  given  it  access  to  tech¬ 
nology  patented  by  PC  vendors. 

Galileo  Moves  Fare 
Pricing  App  to  Unix 

Parsippany,  N.J.-based  Galileo  In¬ 
ternational  Inc.,  which  operates  one 
of  the  four  major  travel  reservation 
systems,  said  it’s  moving  its  fare¬ 
pricing  application  from  a  main¬ 
frame  to  a  group  of  eight  Sun  Fire 
6800  Unix  servers  made  by  Sun 
Microsystems  Inc.  Galileo  also  plans 
to  rewrite  the  software  as  part  of 
the  switch.  The  Unix-based  setup 
is  already  being  used  by  some  of 
Galileo's  customers. 

Security  Hole  Found 
In  Linux  Firewall 

Linux  developers  warned  that  a  flaw 
in  the  Netfilter  firewall  used  in  vari¬ 
ous  versions  of  the  open-source  op¬ 
erating  system’s  kernel  could  leave 
servers  vulnerable  to  attack.  Red 
Hat  Inc.  in  Research  Triangle  Park, 
N.C.,  released  a  patch  to  plug  the 
hole  in  Versions  7.1  and  7.2  of  its 
Linux  distribution.  A  separate  patch 
is  available  at  www.netfilter.org. 


Short  Takes 

Sunnyvale,  Calif.-based  Web  devel¬ 
opment  and  hosting  firm  LOUD- 
CLOUD  INC.  agreed  to  buy  Los  An¬ 
geles-based  FRONTERA  CORP.  in  a 
stock-swap  deal . . .  Southfield, 
Mich.-based  COVISINT  INC.  signed 
up  Plano,  Texas-based  ELECTRONIC 
DATA  SYSTEMS  CORP.  to  provide 
technical  support  to  users  of  its 
business-to-business  exchange. 


NEWS 

Corporate  Privacy 
Credibility  Crumbles 


News  of  questionable  practices  and 
security  gaffes  puts  firms  on  the  defensive 


BY  PATRICK  THIBODEAU 

WASHINGTON 

HRISTOPHER  Fish¬ 
er,  information 
systems  director 
at  Royal  Appli¬ 
ance  Manufactur¬ 
ing  Co.,  agrees  with  a  recent 
Harris  Interactive  Inc.  poll  that 
found  that  a  majority  of  the 
public  is  mistrustful  of  corpo¬ 
rate  privacy  practices  and 
wary  about  sharing  informa¬ 
tion.  And  he’s  doing  something 
to  address  this  trust  problem. 

This  past  weekend,  Fisher’s 
company,  the  Glenwillow, 
Ohio-based  maker  of  Dirt  Dev¬ 
il  vacuum  cleaners,  planned  to 
launch  a  redesigned  Web  site 
that  changes  its  data  collection 
practices.  Instead  of  asking  for 
more  customer  information, 
Royal  Appliance  will  ask  for 
less.  For  instance,  it  will  seek  a 
customer’s  ZIP  code  instead 
of  an  address  to  help  locate  a 
local  product  supplier. 

“The  main  thing  we  want  to 
do  is  keep  the  site  accessible 
and  useful  to  the  broadest 
array  [of  customers]  possible 
but  still  provide  value  to  peo¬ 
ple,”  said  Fisher.  By  taking  a 
minimalist  approach  to  data 
collection,  he  hopes  customers 
will  be  more  comfortable  using 
the  company’s  Web  site  and 
sharing  personal  information. 

What  Royal  is  doing  may  not 
be  so  unusual.  Corporate  pri¬ 
vacy  managers  and  experts 
have  said  that  companies  must 
do  more  to  bridge  a  consumer 
privacy  credibility  gap  that  is 
showing  signs  of  widening. 

The  most  recent  piece  of  ev¬ 
idence  of  customer  mistrust 
was  offered  in  a  poll  conducted 
by  Rochester,  N.Y.-based  Har¬ 
ris  Interactive  for  Privacy  & 
American  Business,  a  nonprof¬ 
it  think  tank  in  Hackensack, 
N.J.;  Ernst  &  Young  Interna¬ 
tional  in  New  York;  and  the 


American  Institute  of  Certified 
Public  Accountants  in  New 
York.  The  poll  of  1,529  adults 
found  that  75%  believed  that 
their  information  would  be 
shared  without  their  permis¬ 
sion,  and  69%  felt  that  hackers 
can  steal  their  data. 

“I  believe  the  trust  gap  that 
[the  pollster]  found  is  real,” 
said  Mel  Petersen,  chief  priva¬ 
cy  officer  at  Cincinnati-based 
Procter  &  Gamble  Co. 

Long  before  the  Harris  poll, 
Proctor  &  Gamble  took  steps 
to  reinforce  consumer  confi¬ 
dence  by  implementing  a 
plain-language  privacy  policy, 
privacy  seal  certification,  com- 


IT  managers  can  do  a  perfect  job 
of  managing  privacy  but  still  be 
penalized  by  consumers  for  other 
companies’  lapses.  It’s  like  boot 
camp:  Even  if  just  one  soldier 
messes  up,  everyone  may  be  told 
to  do  50  push-ups. 

The  privacy  mistakes  of  a  few 
companies  can  affect  an  entire 
industry.  But  some  corporate 
managers  are  also  seeing  feed¬ 
back  stemming  from  unrelenting 
trends,  such  as  identity  theft  and 
rising  volumes  of  spam. 

The  overall  environment  is 
“less  trusting  today . . .  than  it  was 
a  year  ago,  and  that’s  the  cumula¬ 
tive  effect  of  consumer  experi¬ 
ence,"  said  Kristin  Valente,  an  as¬ 
surance  partner  at  Ernst  &  Young. 
“If  businesses  are  going  to  be 
successful,  they  are  going  to  have 
to  turn  that  tide ...  to  embrace 
what  consumers  want." 

An  e-mail  poll  last  summer  by 
The  Gallup  Organization,  a  think 
tank  in  Princeton,  N.J.,  found  that 
80%  of  400  users  said  they  are 
“very  concerned”  or  “somewhat 
concerned"  about  misuse  of  credit 
card  data  on  the  Internet.  An  oft- 
cited  study  by  Cambridge,  Mass.- 


panywide  privacy  training  and 
an  internal  audit  program  and 
by  allowing  consumer  choice 
on  the  use  of  such  data,  said 
Petersen.  He  added  that  large 
corporations  with  good  priva¬ 
cy  practices  can  suffer  collat¬ 
eral  damage  from  the  privacy 
mistakes  of  others,  which  is 
why  he  is  working  with  other 
companies  and  privacy  groups 
to  raise  industry  standards. 

“If  there  were  to  be  some 
egregious  [privacy]  violations, 
things  could  very  quickly  go 
sour,  even  for  us,”  he  said. 

Experts  and  corporate  offi¬ 
cials  don’t  have  to  look  too  far 
for  a  list  of  causes  of  consumer 
mistrust,  such  as  the  rise  in 
identity  theft,  unsolicited  com¬ 
mercial  e-mail  or  spam,  and 
telemarketing. 

Just  last  week,  The  New 


based  Forrester  Research  Inc.  es¬ 
timated  that  total  online  spending 
of  $47.6  billion  last  year  would 
have  been  $15  billion  higher  if  not 
for  privacy  concerns. 

Identity  theft  may  be  partly  to 
blame.  The  U.S.  General  Account¬ 
ing  Office  recently  surveyed  three 
credit  reporting  agencies  and 
found  that  identity  theft  increased 
36%  from  1999  to  2000,  based 
on  the  number  of  fraud  alerts 
(89,000  in  2000)  placed  on  cus¬ 
tomer  records. 

Spam  isn’t  helping  either.  The 
average  in-box  received  an  esti¬ 
mated  700  unsolicited  commer¬ 
cial  e-mail  messages  last  year,  a 
figure  that's  expected  to  double  by 
2006,  according  to  Jupiter  Media 
Metrix  Inc.  in  New  York. 

When  asked  what  companies 
can  do  to  fix  the  problem,  respon¬ 
dents  to  the  Harris  Interactive  poll 
picked  independent  verification  as 
their  top  choice.  That  pick  “is  a 
warning”  to  managers  that  what 
they  are  doing  “is  not  persuasive 
to  the  American  public,"  said  Alan 
Westin,  founder  of  Privacy  & 
American  Business. 

-  Patrick  Thibodeau 


The  Roots  of  Mistrust  Go  Deep 
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What’s  IT  to  Do? 

If  more  firms  follow  good 
privacy  practices,  consumer 
confidence  may  increase, 
say  experts  and  managers. 
Here  are  some  things  they 
say  IT  can  do: 

1.  Post  an  easy-to-understand 
privacy  policy. 

2.  Obtain  privacy  sea! 
certification. 

3.  Get  an  independent  audit. 

4.  Collect  only  the  customer 
data  you  need. 

5.  Give  consumers  choices. 


York  Times  Co.’s  intranet  was 
breached  by  a  security  consul¬ 
tant,  exposing  subscriber 
names,  addresses,  phone  num¬ 
bers  and  even  Social  Security 
numbers. 

Getting  a  Seal  of  Approval 

One  company,  Expedia  Inc., 
said  that  strong  privacy  prac¬ 
tices  give  it  an  edge  with  the 
public.  The  Bellevue,  Wash.- 
based  online  travel  service  has 
received  two  privacy  certifica¬ 
tions  from  seal  organizations, 
Truste,  a  nonprofit  group  in 
San  Jose,  and  BBBOnLine  Inc., 
a  subsidiary  of  the  Council  of 
Better  Business  Bureaus  Inc.  in 
Arlington,  Va. 

Expedia  also  displays  an 
auditing  seal  from  Pricewater- 
houseCoopers,  which  com¬ 
pared  privacy  and  security 
practices  with  Expedia’s  actual 
privacy  policy.  Pricewater- 
houseCoopers  and  Deloitte  & 
Touche  LLP,  both  based  in 
New  York,  also  conduct  pene¬ 
tration  testing  for  Expedia. 

While  these  extra  steps  are 
costly  and  time-consuming, 
“we  believe  it  provides  a  com¬ 
petitive  advantage,”  said  Tony 
Gonchar,  Expedia’s  customer 
relationship  management  and 
privacy  director. 

But  in  the  post-Enron  envi¬ 
ronment,  even  using  an  inde¬ 
pendent  auditor  raises  issues. 
John  Featherman,  privacy 
manager  at  The  Reynolds  and 
Reynolds  Co.  in  Dayton,  Ohio, 
advised  firms  to  avoid  poten¬ 
tial  conflicts  by  not  using  their 
own  financial  auditors  for  in¬ 
ternal  privacy  audits.  > 
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Fact:  When  your  network  is  up,  your  business  is  up. 
Around  the  clock,  and  around  the  world.  So,  you  want 
your  network  to  be  as  reliable  as  possible.  You  want  to 
talk  to  AT&T.  We  have  a  history  of  keeping  complex 
networks  running.  Through  whatever  Man,  Murphy  or 
Mother  Nature  dishes  out. 

How?  With  experts  who  can  help  you  assess  and  plan 
for  just  about  every  phase  of  network  protection,  security 


and  business  continuity.  Plus  a  knowledge  base  built  on 
our  experience  with  massive  networks  and  computing 
environments.  Including  our  own.  It  all  adds  up  to 
99.999%  availability  for  your  voice  and  data  networks. 
Reliability  for  your  business.  Peace  of  mind  for  you. 

Want  to  keep  your  network  and  your  business  up? 
Hook  up  with  AT&T. 

Results:  Measurable.  Possibilities:  Boundless. 


Call  AT&T  toll  free  at  I  866  894-1045  or  visit  us  at  www.attbusiness.com/return 


AT&T 


©2002  AT&T 
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Key  Microsoft  Business  Applications 

Great  Plains  eEnterprise 

APPLICATIONS:  Accounting  and  finance,  field  services,  e-commerce, 
supply  chain  management,  project  accounting  and  human  resources 
TARGET  AUDIENCE:  Companies  with  500  to  5,000  employees  and  less 
than  $800  million  in  revenue 
LICENSING  PRICE  RANGE:  $75,000  to  $250,000 

Great  Plains  Dynamics 

APPLICATIONS:  Accounting  and  finance,  e-commerce,  supply  chain 
management,  project  accounting  and  human  resources 
TARGET  AUDIENCE:  Companies  with  25  to  500  employees  and 
$5  million  to  $50  million  in  revenue 
LICENSING  PRICE  RANGE:  $5,000  to  $50,00  per  user 

Great  Plains  Solomon 

APPLICATIONS:  Accounting  and  finance,  field  services,  e-commerce, 
supply  chain  management,  manufacturing,  project  accounting  and  hu¬ 
man  resources 

TARGET  AUDIENCE:  Companies  with  25  to  500  employees  and 
$5  million  to  $50  million  in  revenue 
LICENSING  PRICE  RANGE:  $5,000  to  $75,000 
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Microsoft  Stepping 
Into  CRM  Market 


It’s  developing  software  aimed  at  midsize 
firms  through  its  Great  Plains  Software  unit 


BY  CAROL  SLIWA 

icrosoft’s  ex¬ 
pansion  strate¬ 
gy  extended  to 
the  business 
applications 
space  last  week,  when  the 
company  announced  plans  to 
offer  customer  relationship 
management  (CRM)  software. 

The  software  maker  also  re¬ 
cently  confirmed  its  intention 
to  explore  new  offerings  in  en¬ 
terprise  storage  and  security, 
even  going  to  the  extent  of  cre¬ 
ating  business  divisions  devot¬ 
ed  to  those  areas. 

Microsoft  Corp.’s  foray  into 
CRM  will  be  executed  through 
its  Great  Plains  Business  Solu¬ 
tions  group,  which  specializes 
in  business  management  appli¬ 
cations  for  small  and  midmar¬ 
ket  companies.  Microsoft  com¬ 
pleted  its  acquisition  of  Fargo, 
N.D.-based  Great  Plains  Soft¬ 
ware  Inc.  in  April  of  last  year. 

Microsoft’s  new  CRM  offer¬ 
ing,  which  is  due  to  ship  in  the 
fourth  quarter,  is  aimed  at 
companies  with  25  to  1,000  em¬ 
ployees,  according  to  senior 
product  manager  Holly  Holt. 
She  said  customers  will  have 
two  ways  to  enter  the  product: 
through  Outlook  mail  clients 
or  through  Internet  Explorer 
browsers. 

Big  Impact 

“It  could  certainly  have  a 
huge  impact  and  really  open 
up  the  lower  end  of  the  market 
for  smaller-size  to  medium- 
size  businesses,”  said  Mary 
Wardley,  an  analyst  at  IDC  in 
Framingham,  Mass.  Many  of 
those  firms  have  Microsoft  in¬ 
frastructures  and  use  Outlook, 
she  noted. 

Jim  Prevo,  CIO  at  Green 
Mountain  Coffee  Roaster  Inc. 
in  Waterbury,  Vt.,  an  Exchange 
Server  and  Outlook  user,  said 


he  sees  the  product  as  a  poten¬ 
tial  “logical  add-on”  for  his 
company.  “We’d  have  to  inte¬ 
grate  it  with  our  ERP  back  end, 
but  it  is  worth  a  look,”  he  said. 

Analysts  said  they  don’t  ex¬ 
pect  Microsoft  to  take  on  the 
enterprise  CRM  offerings  from 
vendors  such  as  Siebel  Systems 
Inc.,  SAP  AG,  Oracle  Corp., 
PeopleSoft  Inc.,  Onyx  Software 
Corp.  or  Pivotal  Corp.  in  the 
foreseeable  future. 

Microsoft’s  product  has  only 
basic  functionality  compared 
with  the  feature-rich  sales, 
customer  service  and  market¬ 
ing  automation  capabilities  of 
the  software  from  the  major 
players,  said  Joe  Outlaw,  an  an¬ 
alyst  at  Stamford,  Conn.-based 
Gartner  Inc.  Microsoft’s  prod- 


BY  CAROL  SLIWA 

Microsoft  Corp.  disclosed  last 
week  that  the  release  of  its  new 
Windows  .Net  Server  operat¬ 
ing  system  is  being  delayed  un¬ 
til  the  second  half  of  the  year 
—  the  same  time  frame  in 
which  the  first  service  pack  of 
updates  and  fixes  is  due  to 
emerge  for  its  Windows  XP 
desktop  operating  system. 

The  company  launched  XP 
Oct.  25,  but  corporate  users  of¬ 
ten  wait  for  a  product’s  first 
service  pack  before  they  con¬ 
sider  deployment.  A  service 
pack  typically  includes  all  of 
the  security  patches  and  criti¬ 
cal  updates  released  since  the 
product’s  launch. 


uct,  for  instance,  isn’t  designed 
to  support  multiple  lines  of 
business,  he  said. 

But,  Outlaw  added,  “I  have 
no  doubt  that  they  will  gradu¬ 
ally  add  more  and  more  func¬ 
tionality  to  the  product  to 
make  it  appeal  to  larger  and 
larger  companies.” 

Roots  in  Logistics 

Great  Plains  entered  the 
CRM  space  in  1997  with  a  lo¬ 
gistics-intensive  field  service 
product  to  manage  the  dis¬ 
patch  of  technicians  to  repair 
jobs.  Two  years  later,  the  com¬ 
pany  forged  a  relationship  with 
San  Mateo,  Calif.-based  Siebel 
Systems  to  get  its  name  on 
Siebel’s  midmarket  CRM  prod¬ 
uct,  calling  it  Great  Plains 
Siebel  Front  Office,  Holt  said. 

Holt  said  Microsoft’s  CRM 
technology  won’t  have  the 
sales  channel  management  or 
telemarketing  campaign  man- 


If  corporate  users  wait  for 
the  first  service  pack  of  the  de¬ 
layed  Windows  .Net  Server, 
deployments  could  be  pushed 
into  2003,  at  the  earliest. 

But  Tom  Bittman,  an  analyst 
at  Stamford,  Conn. -based  Gart¬ 
ner  Inc.,  said  users  don’t  have 
to  wait  for  the  service  pack 
with  Windows  .Net  Server  be¬ 
cause  of  the  incremental  na¬ 
ture  of  most  of  the  changes.  “I 
think  the  way  to  see  this  is, 
Windows  2000  was  NT  5  and 
.Net  Server  is  NT  5.1,”  he  said. 

The  most  recent  release  tar¬ 
get  for  Windows  .Net  Server 
had  been  the  first  half  of  the 
year.  A  Microsoft  spokes¬ 
woman  said  the  company’s 


agement  capabilities  that 
Siebel  MidMarket  Edition  has. 
Microsoft’s  product  will  han¬ 
dle  only  e-mail  campaign  man¬ 
agement,  she  said. 

According  to  Erin  Kinikin, 
an  analyst  at  Cambridge, 
Mass.-based  Giga  Information 
Group  Inc.,  “It’s  not  clear  that 
midmarket  companies  want  — 
or  can  afford  —  all  the  func¬ 
tionality  that  Siebel  MidMar- 


new  Trustworthy  Computing 
initiative  —  which,  in  part, 
calls  for  all  software  to  be  scru¬ 
tinized  more  intensely  from  a 
security  standpoint  —  may 
cause  modifications  and  addi¬ 
tions  to  engineering  processes. 
She  said  that  could  lead  to 
longer  delivery  schedules  but 
higher  quality  in  the  long  term. 
The  spokeswoman  added  that 
testing  and  customer  feedback 
also  were  factors  in  the  delay. 

Bittman  said  Microsoft  is 
trying  to  solidify  the  design  of 
the  .Net  architecture  and  kill 
any  bugs.  “It’s  not  as  easy  as 
they  were  hoping,  and  I  think 
they’re  trying  to  do  it  right,”  he 
said. 

Separation  Anxiety 

The  new  projected  ship  date 
for  Windows  .Net  Server  will 
lead  to  a  separation  of  at  least 
nine  months  from  the  release 
of  the  Windows  XP  desktop 
operating  system.  Both  operat¬ 
ing  systems  are  based  on  the 
same  source  code. 


ket  gives  them.”  She  added  that 
“the  dirty  secret  of  CRM  is  that 
most  companies  only  use  about 
20%  of  the  functionality.” 

“The  CRM  midmarket  has 
been  crying  for  a  market 
leader,”  Kinikin  said.  “Siebel 
and  the  big  ERP  vendors  are 
too  complex.  And  none  of  the 
midmarket  vendors  are  a  good 
long-term  viability  bet.  None 
are  profitable.”  I 


“Clearly,  they’re  going  to  still 
try  to  maintain  a  common  code 
base,  but  the  more  that  you 
separate,  the  more  you  have 
dual-development  issues,”  Bitt¬ 
man  said.  “For  example,  if  they 
find  a  bug  in  XP  right  now,  they 
also  have  to  fix  that  in  the  li¬ 
braries  being  developed  for 
Windows  .Net  Server.” 

In  addition  to  the  usual  bug 
fixes  and  security  patches,  the 
first  service  pack  for  Windows 
XP  will  incorporate  any  oper¬ 
ating  system  changes  called  for 
under  the  consent  decree  that 
Microsoft  reached  with  the 
U.S.  Department  of  Justice,  a 
Microsoft  spokeswoman  said. 
She  declined  to  provide  fur¬ 
ther  details. 

“This  is  business  as  usual  — 
the  typical  rollout  for  service 
packs  following  a  product 
launch,”  she  said.  I 

For  additional  re¬ 
sources  online,  visit 
our  Operating  System 
Knowledge  Center. 

www.com  puterworld.com/q?k1500 


Microsoft  Delays  Launch  of 
.Net  Server  Operating  System 

Also  announces  plans  for  XP  service  pack 


c'A  ■? 


I 


re  company. 


■  jfci*  • 

m 

m&Pi. 


F 


ventas.com 


©3003  VERITAS  Software  Corporation.  All  rights  reserved.  VERITAS  and  the  VERITAS  logo  are  trademarks  or  registered  trademarks  of  VERITAS  Software  Corporation. 

All  other  trademarks  are  the  property  of  their  respective  owners. 


14 


Novell  Names  Vice 
Chairman;  COO  Leaves 


Novell  Inc.  brought  back  former  ex¬ 
ecutive  Christopher  Stone  to  work 
as  vice  chairman  within  a  new  “of¬ 
fice  of  the  CEO.”  Stone  will  report 
to  CEO  Jack  Messman  and  will  run 
engineering,  marketing,  consulting 
and  other  units.  Novell  also  an¬ 
nounced  the  resignation  of  Stewart 
Nelson,  who  had  been  chief  operat¬ 
ing  officer.  In  addition,  the  company 
reported  revenue  of  $271  million  for 
its  first  quarter  ended  Jan.  31. 

New  York  limes  Co. 
Fixes  Intranet  Holes 

The  New  York  Times  Co.  patched 
security  holes  in  its  corporate  intra¬ 
net  after  a  hacker  accessed  some  of 
the  company’s  databases,  including 
one  that  contained  Social  Security 
numbers  and  other  information 
about  new  employees.  A  spokesman 
said  it’s  continuing  to  investigate  to 
ensure  that  the  network  is  protected 
against  further  intrusions. 

Security  Flaws  Found 
In  PHP  Language 

Security  researchers  warned  of 
multiple  vulnerabilities  in  the  open- 
source  PHP  scripting  language.  The 
holes  could  put  Web  servers  running 
early  versions  of  PHP  for  Apache 
on  Linux  and  Solaris  at  risk  of  being 
hit  by  buffer  overflow  attacks.  The 
problem  can  be  fixed  by  installing  a 
patch  available  at  www.php.net  or 
by  upgrading  to  Version  4.1.2  of  the 
HTML-embedded  scripting  tool. 

(GANN’S  Lynn  Calls  for 
Organization  Overhaul 

Stuart  Lynn,  president  of  the  Inter¬ 
net  Corporation  for  Assigned  Names 
and  Numbers  (ICANN),  proposed  a 
series  of  structural  changes  at  the 
Marina  del  Rey,  Calif.-based  organi¬ 
zation.  including  a  reduction  in  the 
size  of  its  governing  board  and  the 
end  of  at-large  board  elections. 
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BEA  Moves  to  Better 
Unify  Its  Middleware 


Users  say  they  like  the  idea  of  integrating 
products  but  don't  want  to  be  locked  in 


BY  MICHAEL  MEEHAN 

SAN  DIEGO 

Looking  to  improve 
the  ability  of  its 
middleware  to  serve 
as  enterprise-grade 
glue  for  users  with  a 
mix  of  different  applications, 
BEA  Systems  Inc.  last  week  an¬ 
nounced  plans  to  combine  its 
tools  into  a  unified  and  better 
integrated  bundle. 

At  its  annual  user  confer¬ 
ence  here,  San  Jose-based  BEA 
said  it’s  linking  its  application 
server,  portal  and  integration 
software  into  a  single  package 
along  with  a  new  Java  develop¬ 
ment  tool  that  was  unveiled 
last  week  (see  related  story 
below).  The  company  is  build¬ 
ing  shared  source  code  into  the 
products  so  they  will  be  easier 
to  install  and  work  more  in 
concert,  BEA  executives  said. 

IT  managers  at  BEA’s  eWorld 
2002  conference  said  they  want 
exactly  that  kind  of  unified 
application  infrastructure.  But 


they  also  acknowledged  that  if 
BEA  and  its  chief  middleware 
rival,  IBM,  succeed  in  deliver¬ 
ing  the  technology,  users  who 
buy  into  it  will  become  highly 
dependent  on  the  vendor  they 
choose. 

“So  far,  [BEA’s  software]  user 
fees  haven’t  been  a  problem  for 
us,  but  it’s  always  a  concern,” 
said  Denise  Fishel,  director 
of  e-business  planning  and 
development  at  Toshiba  Amer¬ 
ica  Business  Solutions  Inc.  in 
Irvine,  Calif. 

BEA’s  WebLogic  Server  soft¬ 
ware  is  playing  a  key  role  in  a 
$2  million  project  to  unify  the 
different  online  portals  that 
Toshiba  America  developed 
for  dealers  of  its  copiers,  fax 
machines  and  printers.  The 
company  is  also  switching 
from  a  homegrown  e-com- 
merce  system  to  Oracle  Corp.’s 
iStore  software.  “Without  BEA 
in  the  middle,  we  wouldn’t  be 
able  to  undertake  this  kind  of 
migration,”  Fishel  said. 


More  on  Its  Plate 

At  its  user  conference  last 
week,  BEA  also: 

■  Announced  a  WebLogic  Server 
release  that  adds  support  tor  IBM’s 
S/390  and  zSeries  mainframes. 

■  Said  it  had  acquired  Appeal 
Virtual  Machines  AB,  a  Stock¬ 
holm-based  developer  of  Java 
virtual  machine  (JVM)  software. 

■  Detailed  an  agreement  with  Intel 
to  optimize  Appeal's  JVM  code 
for  use  servers  based  on  Intel’s 
Xeon  and  Itanium  chips. 

■  Launched  a  new  Internet  portal 
and  other  tools  to  support  develop¬ 
ers  who  use  its  WebLogic  Server 
and  its  other  products. 


The  integrated  WebLogic 
Platform  7.0  bundle  is  due  to 
ship  by  midyear,  but  BEA  didn’t 
disclose  pricing  details  last 
week.  The  package  is  based  on 
WebLogic  Server  7.0,  a  new 
release  of  the  company’s  flag¬ 
ship  application  server. 

United  Air  Lines  Inc.’s  loyalty 
services  division,  which  man¬ 
ages  frequent-flier  programs 
for  the  Chicago-based  airline, 


is  another  WebLogic  user.  Rob 
Robless,  chief  technical  officer 
for  the  division,  said  he  hopes 
to  use  Enterprise  JavaBeans 
within  the  BEA  software  to 
componentize  applications  so 
they  can  be  ported  to  multiple 
operating  systems. 

“The  whole  idea  of  this  is 
not  to  be  controlled  by  the 
technology,”  Robless  said.  But 
he  added  that  users  can  find 
themselves  stuck  with  vendors 
no  matter  what  technology 
choices  they  make. 

Alfred  Chuang,  BEA’s  presi¬ 
dent  and  CEO,  said  compe¬ 
tition  and  the  complexity  of 
enterprise-level  IT  infrastruc¬ 
tures  should  prevent  any  single 
vendor  from  grabbing  too 
much  power. 

Rick  Barry,  a  BEA  user  who 
is  vice  president  of  informa¬ 
tion  systems  at  Dallas-based 
broadband  services  provider 
IP  Communications  Inc.,  sug¬ 
gested  customers  who  want 
to  avoid  technology  lock-in 
should  refrain  from  using 
proprietary  extensions  that 
vendors  build  into  application 
servers  and  other  Java-based 
software. 

Robless  said  users  should 
also  pay  attention  to  how 
quickly  vendors  such  as  BEA 
take  their  proprietary  product 
add-ons  and  open  them  up  to 
other  vendors  through  Sun  Mi¬ 
crosystems  Inc.’s  Java  Commu¬ 
nity  Process.  > 


Java  Tool  Tied  to  WebLogic,  for  Now 


BEA  Systems  claimed  that  the 
WebLogic  Workshop  development 
framework  it  unveiled  last  week  will 
make  big  strides  in  easing  the  cre¬ 
ation  of  Java-based  Web  services 
applications  for  programmers  of  all 
skill  levels. 

But  while  corporate  developers 
may  want  better  general-purpose 
Java  tools,  it  remains  to  be  seen 
how  much  the  BEA  tool  will  help 
address  their  needs.  That’s  be¬ 
cause  in  its  current  form,  WebLogic 
Workshop  is  only  for  building  Web 
services  and  will  run  only  on  BEA’s 
application  server  platform. 

“I  would  have  to  see  BEA’s  offer¬ 
ing,  but  I  would  be  very  concerned 
about  proprietary  annotations  that 
would  mean  I  couldn’t  move  an 


application  between  multiple  plat¬ 
forms,”  said  Bob  Dutile,  a  senior 
vice  president  in  Cleveland-based 
KeyCorp’s  application  architecture 
group,  which  uses  IBM’s  rival  Web¬ 
Sphere  application  server  package. 

“One  of  the  reasons  we  are  a 
Java  shop  is  because  Microsoft 
was  too  proprietary,”  Dutile  added. 

Mark  Driver,  an  analyst  at  Stam¬ 
ford,  Conn.-based  Gartner  Inc.,  said 
other  vendors’  tools  don’t  under¬ 
stand  the  “proprietary"  annotations 
that  BEA  built  into  the  Workshop 
source  code.  The  annotations  pro¬ 
vide  instructions  on  how  to  wrap  a 
Java  program  as  a  Web  service  and 
deploy  it  on  the  application  server. 

BEA  senior  product  manager 
Byron  Sebastian  acknowledged 


that  “some  amount  of  work"  would 
have  to  be  done  to  get  the  Workshop 
tool,  code-named  Cajun,  to  run  on 
another  application  server.  “But  it’s 
certainly  possible,”  he  said. 

Sebastian  added  that  BEA  plans 
to  standardize  the  annotations  used 
in  the  new  development  framework 
through  Sun  Microsystems'  Java 
Community  Process. 

But  some  analysts  said  there's 
no  guarantee  that  other  vendors 
will  use  the  resulting  reference  im¬ 
plementation  to  create  tools  that 
can  run  on  non-BEA  platforms. 

Nick  Gall,  an  analyst  at  Meta 
Group  Inc.  in  Stamford,  Conn.,  said 
he  thinks  different  vendors  will  even¬ 
tually  offer  Java  development  tools 
based  on  a  consensus-driven  stan¬ 
dard.  But,  he  predicted,  that  “will 
take  another  18  months  to  solidify." 

Engineered  by  former  Microsoft 


Corp.  employees,  BEA’s  new 
framework  aims  to  remove  the 
need  for  developers  to  understand 
the  complexities  of  the  underlying 
Java  environment,  similar  to  the 
way  Microsoft’s  Visual  Basic  eases 
programming  for  Windows. 

A  beta  version  of  WebLogic 
Workshop  is  available  now,  and  the 
tool  is  due  to  ship  later  this  year. 
Sebastian  said  the  tool  is  for  build¬ 
ing  Web  services  applications  only, 
although  analysts  predicted  that  it 
will  become  more  general-purpose. 

“This  is  only  the  first  step  of 
many  that  will  need  to  be  taken  by 
BEA  and  other  vendors  if  the  ‘J2EE 
development  is  too  hard  and 
painful’  trend  is  going  to  be  ade¬ 
quately  addressed,”  said  John  Mey¬ 
er,  an  analyst  at  Cambridge,  Mass.- 
based  Giga  Information  Group  Inc. 

-  Carol  Sliwa 
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DHL  Builds  U.S.  Data  Center 
To  Help  Manage  Global  Net 

Arizona  facility  will  cost  $250M  over  five 
years,  link  to  sites  in  U.K.  and  Malaysia 


BY  LINDA  ROSENCRANCE 

HL  WORLDWIDE 
Express  Inc.  plans 
to  spend  $250 
million  over  the 
next  five  years  to 
build  and  operate  a  U.S.-based 
data  center  that  will  complete 
a  trio  of  facilities  designed  to 
provide  round-the-clock  man¬ 


agement  of  the  air  freight  car¬ 
rier’s  IT  systems  and  networks. 

The  new  data  center  will  be 
located  in  Scottsdale,  Ariz., 
and  is  due  to  be  fully  opera¬ 
tional  by  September,  San  Fran- 
cisco-based  DHL  said  last 
month.  The  Scottsdale  facility 
will  be  linked  to  the  company’s 
existing  data  and  IT  services 


centers  in  London  and  Kuala 
Lumpur,  Malaysia. 

Each  center  is  located  within 
one  of  the  three  geographic 
regions  DHL  uses  to  divide  its 
global  business  operations  in¬ 
to  separate  units.  But  the  IT 
facilities  will  work  in  tandem 
to  manage  the  company’s  en¬ 
tire  network  infrastructure  24 
hours  a  day,  seven  days  a  week, 
DHL  said. 

Each  data  center  will  be  in 
charge  of  the  company’s  DHL- 
Net  computing  and  telecom¬ 


munications  network  for  eight 
hours  and  will  then  pass  con¬ 
trol  to  the  next  facility.  DHL 
said  the  centers  will  manage  IT 
operations  in  nine-hour  shifts, 
covering  the  eight  hours  of 
network  support  plus  a  one- 
hour  overlap  period  for  the 
transfer  of  control. 

The  Scottsdale  facility  will 
occupy  106,000  square  feet  of 
space,  according  to  DHL.  A 
company  spokeswoman  would 
not  comment  on  the  systems 
and  applications  that  will  be 


installed  in  Scottsdale,  other 
than  to  note  that  the  technolo¬ 
gy  used  at  DHL’s  regional  data 
centers  includes  network  mon¬ 
itoring  tools  and  fault-report¬ 
ing  systems. 

Those  systems  are  designed 
to  ensure  that  IT  problems  are 
detected  quickly,  the  spokes¬ 
woman  said.  In  the  event  of  net¬ 
work  failures,  backup  systems 
and  network  circuits  will  kick 
in  automatically,  she  added. 

DHL  currently  has  a  smaller 
IT  operation  in  Burlingame, 
Calif.  The  company  said  it 
plans  to  employ  about  350 
workers  at  the  Scottsdale  facil¬ 
ity,  mixing  new  hires  with 
workers  who  will  be  trans¬ 
ferred  from  Burlingame  and 
other  sites  in  Canada  and  Latin 
America.  I 


Continued  from  page  1 

Mainframe  Skills 

using  part  of  his  annual  train¬ 
ing  budget  to  bring  younger 
workers  up  to  speed  on  main¬ 
frame  technologies. 

And  the  skills  crunch  is  only 
going  to  get  worse,  according 
to  Stamford,  Conn.-based  Meta 
Group  Inc.  As  part  of  prelimi¬ 
nary  results  from  a  survey  of 
300  midsize  and  large  compa¬ 
nies,  Meta  last  month  said  it 
found  that  55%  of  IT  workers 
with  mainframe  experience 
are  over  50  years  old. 

A  bigger  problem  is  that 
more  than  90%  of  the  compa¬ 
nies  that  have  mainframe  staffs 

Mainframes 
Ride  Again 

m  IBM’s  mainframe  revenue  rose 
last  year  for  the  first  time  since 
1989.  In  addition,  shipments  of 
mainframe  MIPS  increased 
12%  year-to-year  in  the  fourth 
quarter  and  by  more  than  40%  in 
each  of  the  other  three  quarters. 

»  More  than  200  billion  lines  of 
Cobol  code  are  still  in  use  today, 
and  5  billion  lines  are  added  to 
production  systems  each  year.  It 
costs  $25  per  line  to  replace 
Cobo! -based  programs. 


SOURCES  IBM  GARTNER  INC  .  AND  TACTICAL 
STRATEGY  GROUP  INC  .  SOQUEL.  CALIF 


said  in  the  survey  that  they 
have  “zero  strategy”  for  deal¬ 
ing  with  the  diminishing  pool 
of  skilled  workers,  said  Meta 
analyst  Maria  Schafer.  Mean¬ 
while,  all  indications  are  that 
legacy  mainframe  systems  and 
applications  —  not  to  mention 
new  technologies  such  as 
IBM’s  zSeries  servers  —  will 
be  around  long  after  those 
workers  have  retired. 

Companies  continue  to  add 
a  total  of  about  5  billion  lines  of 
Cobol  code  annually  to  their 
data  center  systems,  according 
to  Bill  Ulrich,  president  of 
management  consulting  firm 
Tactical  Strategy  Group  Inc.  in 
Soquel,  Calif.  And  IBM  in  Janu¬ 
ary  said  its  annual  mainframe 
revenue  grew  last  year  for  the 
first  time  since  1989. 

Industries  that  are  expected 
to  be  hit  particularly  hard  by 
the  mainframe  skills  shortage 
include  telecommunications, 
banking  and  finance,  insurance 
and  government,  all  of  which 
have  huge  installed  bases  of 
mainframe  systems. 

“The  mainframe  is  the  foun¬ 
dation  that  everything  is  built 
on  [here],”  said  Don  Greb,  first 
vice  president  and  manager  of 
information  processing  engi¬ 
neering  services  at  Mellon  Fi¬ 
nancial  Corp.  in  Pittsburgh. 
“The  majority  of  our  data  is 
still  residing  on  a  mainframe, 
even  though  a  lot  of  it  is  front- 
ended  through  the  Web  and 


e-commerce  applications.” 

Among  other  steps  it  is  tak¬ 
ing  aimed  at  preserving  its 
mainframe  know-how,  Mellon 
has  launched  a  summer  intern¬ 
ship  program  during  which  the 
company  teaches  mainframe 
skills  to  university  students  it 
hopes  to  recruit  after  they 
graduate,  Greb  said. 

But  David  Lewis,  CIO  for  the 
Massachusetts  state  govern¬ 
ment,  said  he’s  more  con¬ 


cerned  about  the  skills  that 
can’t  be  taught  and  have  to  be 
learned  by  workers  through 
hands-on  experience. 

“Where  you  start  running 
into  really  tricky  issues  is 
around  the  products  that  run 
on  the  mainframe  and  how 
they  interrelate  to  each  other,” 
Lewis  said,  calling  that  “an  ac¬ 
quired  skill”  that  will  take  time 
for  new  workers  to  grasp. 

“You  don’t  go  to  school  to 


see  how  CA  interacts  with 
IBM,”  Lewis  said,  referring  to 
software  vendor  Computer  As¬ 
sociates  International  Inc.  in 
I  Islandia,  N.Y.  “You  learn  it  by 
experience.  That’s  where  I 
frankly  think  the  greatest  risks 
exist  [for  companies].”  I 
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Attention:  Calling  All  Cobol  Veterans 


Bill  Payson  is  sick  and  tired  of  de¬ 
bating  whether  Cobol  is  obsolete. 
The  fact  is,  there’s  so  much  Cobol 
out  there  that  companies  are  going 
to  have  to  deal  with  it,”  said  Pay- 
son,  president  of  The  Senior  Staff, 
a  Campbell,  Caiif.-based  online  job 
information  data  bank  for  IT  work¬ 
ers  who  are  35  or  older. 

Payson  is  helping  to  organize 
the  Legacy  Reserves,  which  he  de¬ 
scribed  as  “a  free-agent  initiative" 
for  retired,  semiretired  or  out-of- 
work  Cobol  programmers  who  are 
seeking  freelance  assignments. 
The  plan  will  be  formally  launched 
in  June  at  the  Cobo!  Expo  2002 
conference  in  Chicago. 

The  Legacy  Reserves  is  being 
set  up  by  a  partnership  that  also  in¬ 
cludes  the  Pleasant  Hill.  Calif.- 
based  Professional  Association  of 
Contract  Employees  (PACE)  and 
Micro  Focus  International  Ltd.,  a 


Rockville,  Md.-based  vendor 
whose  products  include  a  Cobol 
software  compiler. 

Payson,  who  is  working  from  a 
database  that  contains  the  names 
of  mainframe  programmers,  many 
of  whom  previously  were  tapped  to 
work  on  Y2k  projects,  said  he  has 
identified  3,000  to  4,000  Cobol 
veterans  who  want  to  return  to 
work  on  a  contract  basis. 

"They  don’t  want  full-time  jobs, 
but  they’re  sick  of  sitting  on  the 
beach  or  playing  golf  asl  the  time,’’ 
he  said. 

Although  all  the  details  have  yet 
to  be  worked  out,  the  idea  is  that 
companies  would  go  through 
PACE  to  contract  with  workers 
who  are  listed  in  Payson’s  data¬ 
base.  PACE  would  function  as 
the  employer  of  record  for  the 
workers. 

The  Legacy  Reserves  also  plans 


to  offer  workers  training  in  Java 
and  other  technologies  that  can  be 
used  to  Web-enable  mainframe 
applications,  Payson  sa’d. 

Bob  Schwartz.  CIO  at  Matsushi¬ 
ta  Electric  Corporation  of  Ameri¬ 
ca’s  Panasonic  Co.  division  in  Se- 
caucus,  N.J.,  said  Payscn’s  data¬ 
base  of  experienced  workers  “may 
become  intriguing  to  use  when  we 
need  those  skills.” 

But  other  IT  managers  said  they 
would  prefer  to  hire  full-time  em¬ 
ployees,  not  contractors. 

“With  contractors,  there  tends 
to  be  less  of  an  organizational  affil¬ 
iation,"  said  Louis  Gutierrez,  former 
CIO  at  Harvard  Pilgrim  Health  Care 
Inc.  in  Wellesley,  Mass. 

“With  full-time  [employees],  you 
can  really  work  on  staff  develop¬ 
ment  and  incorporating  them  into 
an  organizational  mission,”  added 
Gutierrez,  who’s  now  a  principal  at 
Exeter  Group  Inc.,  an  IT  consultan¬ 
cy  in  Cambridge,  Mass. 

-  Julia  King 
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American  Express  Signs  $4B  IT  Services  Deal  With  IBM 

Pay-as-you-go  contract  includes 

transfer  of 2,000  IT  workers  to  IBM 


BY  TODD  R.  WEISS 

In  a  blockbuster  deal  that’s  ex¬ 
pected  to  be  worth  more  than 
$4  billion  over  the  next  seven 
years,  American  Express  Co.  is 
outsourcing  a  big  piece  of  its 
IT  operations  —  and  transfer¬ 
ring  about  one-  l 
third  of  its  6,000 
technology  work¬ 
ers  —  to  IBM. 

New  York-based  Amex  last 
week  said  it  expects  to  save 
“hundreds  of  millions  of  dollars 
in  IT  costs”  during  the  life  of 
the  outsourcing  contract  with 
IBM’s  Global  Services  unit. 

The  deal  took  effect  on  Fri¬ 


day  in  the  U.S.  and  will  be  ex¬ 
tended  to  the  financial  ser¬ 
vices  firm’s  international  oper¬ 
ations  starting  in  May. 

Under  the  agreement,  Amex 
will  maintain  oversight  of  its 
IT  strategy,  key  vendor  rela¬ 
tionships,  its 
voice  and  data 
network  and  de¬ 
velopment  of  applications  and 
databases.  But  the  company 
will  give  IBM  the  reins  of  its  IT 
operations  infrastructure,  in¬ 
cluding  major  data  centers  in 
Phoenix  and  Minneapolis. 

Amex  CIO  Glen  Salow  said 
the  company,  which  processes 


about  1  billion  transactions  dai¬ 
ly,  will  receive  IT  support  ser¬ 
vices  from  IBM  on  an  as-need¬ 
ed  “utility  model”  basis. 

As  part  of  the  deal,  IBM  has 
promised  to  proactively  reallo¬ 
cate  IT  resources  and  add  new 
computing  capabilities  as  busi¬ 
ness  needs  change  at  Amex. 

In  addition,  part  of  the  fees 
Amex  pays  to  IBM  will  depend 
on  the  amount  of  IT  services 
work  it  actually  requires. 
Salow  described  that  part  of 
the  arrangement  as  “out-task¬ 
ing.”  The  deal  “achieves  a  level 
of  flexibility  while  assuring 
ourselves  ...  a  good  price  and 
quality  [of  service],”  he  said. 

Bruce  Caldwell,  an  analyst  at 
San  Jose-based  Dataquest  Inc., 
said  the  agreement  mixes  tra¬ 
ditional  outsourcing  with  the 


new  pay-as-you-go  approach 
to  IT  services  being  offered  by 
IBM  and  rivals  such  as  Elec¬ 
tronic  Data  Systems  Corp. 

High-Profile  Customers 

IBM’s  success  in  signing 
up  a  high-profile  customer 
such  as  Amex  gives  the  utility 
concept  —  as  well  as  IBM  —  a 
big  credibility  boost,  Caldwell 
said.  “It’s  a  major  endorse¬ 
ment  by  a  major  American 
company  with  huge  IT  re¬ 
sources,”  he  said. 

The  IT  contract  between 
Amex  and  IBM  follows  a  $175 
million  agreement  for  as-need- 
ed  IT  services  that  Plano, 
Texas-based  EDS  signed  last 
month  with  Dallas-based  con¬ 
venience  store  chain  7-Eleven 
Inc.  EDS  also  signed  a  similar 


services  contract  in  August 
with  Golden,  Colo.-based 
Coors  Brewing  Co. 

The  2,000  Amex  employees 
who  will  be  offered  positions 
at  IBM  include  IT  operations 
workers,  technical  support 
staffers  and  programmers,  the 
companies  said.  About  1,000 
of  them  work  at  the  Phoenix 
data  center. 

The  transfer  of  the  U.S.  IT 
operations  is  due  to  be  com¬ 
pleted  this  month,  while  inter¬ 
national  operations  will  be 
shifted  in  a  phased  approach 
that’s  expected  to  take  several 
months. 

IBM  will  manage  data  center 
services  from  the  Amex  IT  fa¬ 
cilities  in  Phoenix  and  Min¬ 
neapolis.  Technical  support 
services  will  also  be  provided 
on-site  to  Amex’s  business  op¬ 
erations  worldwide,  the  com¬ 
panies  said. I 
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IT  OUTSOURCING 


When  choosing  a  technology  paring _ 

there  are  many  things  to  look  for. 

Always  start  with  this. 
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CERTIFIED 

Partner 


The  above  logo  represents  the  pinnacle  of  business  technology  in  the  world  today.  The  companies  that  bear  it  are  Microsoft  Certified  Partners, 
and  when  you  encounter  one,  you  encounter  a  professional  proven  to  be  the  best  at  what  they  do.  They  have  the  most  certified  experts  on 
staff,  receiving  their  training,  support  and  tools  directly  from  Microsoft.  They  have  the  broadest  range  of  experience,  having  expertise  in  areas 
such  as  networking,  infrastructure,  collaboration,  and  many  other  leading  disciplines.  And  there’s  a  Microsoft  Certified  Partner  right  near  you. 

To  find  one,  go  to  http://mcspreferral.microsoft.com/ 
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Ariba  Ships  ‘Spend 
Management’  Tools 

Shift  from  B2B  aims  applications  at 

managing,  analyzing  corporate  spending 


BY  MICHAEL  MEEHAN 

RIBA  INC.  last 
week  announced 
new  invoicing, 
spending  analy¬ 
sis  and  contract 
monitoring  tools,  continuing 
its  attempt  to  redefine  itself  as 
a  vendor  of  “spend  manage¬ 
ment”  software  instead  of  busi- 
ness-to-business  products. 

Sunnyvale,  Calif.-based  Ari¬ 
ba  formally  introduced  its 
Spend  Management  Suite, 
which  adds  purchasing  analy¬ 
sis  capabilities  to  its  product 
sourcing  and  procurement 
tools.  Ariba  is  also  expanding 
its  sourcing  and  procurement 
lines  with  several  new  or  up¬ 
graded  applications. 

All  of  the  products  became 
available  last  week  except  for 
the  analysis  software,  which  is 
in  beta-testing  now  and  is  set 
for  general  release  by  the  end 
of  this  month,  Ariba  said. 

The  new  suite  continues  a 
migration  away  from  transac¬ 
tion-centric  business-to-busi- 
ness  software  that  Ariba  began 
early  last  year  and  accelerated 
in  the  fall  after  Robert  Calde- 
roni  was  named  CEO. 

Analysts  said  the  strategy 
change  was  critical  for  Ariba’s 


Buying  Tools 

Ariba’s  Spend  Management 
Suite  consists  of  the  following 
products: 

ANALYSIS  TOOLS  to  help  users 
examine  corporate  spending  pat¬ 
terns  and  identify  possible  savings. 

SOURCING  SOFTWARE  that 
automates  the  process  of  finding 
new  suppliers  and  putting  con¬ 
tracts  out  for  bid. 


PROCUREMENT  APPLICATIONS 

that  manage  purchasing  transac¬ 
tions  through  the  entire  invoicing 
and  payment  cycle. 


continued  survival  after  the 
business-to-business  market 
crash  last  year.  But  they  cau¬ 
tioned  that  the  company’s  trans¬ 
formation  is  far  from  complete. 

Ariba’s  technology  roots  are 
in  “white  collar  procurement” 
applications  that  automate  the 
purchasing  of  office  supplies 
and  other  goods  outside  manu¬ 
facturing,  said  Karen  Peterson, 
an  analyst  at  Gartner  Inc.  in 
Stamford,  Conn.  “They  still 


CEO  says  new 
technology  needed 
to  boost  chip  sales 

BY  JENNIFER  DlSABATINO 

SAN  FRANCISCO 

Intel  Corp.  suffered  along  with 
other  technology  vendors  dur¬ 
ing  2001,  which  CEO  Craig 
Barrett  described  in  January  as 
“a  terrible  year.”  But  the  chip 
maker  isn’t  backing  off  from  its 
plans  to  invest  heavily  in  prod¬ 
uct  development  and  new 
manufacturing  facilities. 

Despite  a  big  drop  in  chip 
sales,  Intel  is  moving  forward 
with  development  and  capital 
spending  programs  expected 
to  cost  about  $20.7  billion  in 
combined  expenses  from  this 
year  and  last  year.  Barrett  said 
at  last  week’s  Intel  Developer 
Forum  here  that  the  firm  is 
dipping  into  its  cash  reserves 
to  help  fund  the  spending. 

But  Barrett  said  the  invest¬ 
ments  are  needed  to  help  nur¬ 
ture  Intel’s  “ecosystem”  —  the 
vendors  that  depend  on  im¬ 
proved  processing  power  to 


need  to  prove  that  they  can  ex¬ 
pand  into  more  complex  areas 
of  the  enterprise,”  she  said. 

Ariba  faces  plenty  of  compe¬ 
tition  for  managing  supply 
chain  purchasing  activities,  Pe¬ 
terson  said.  She  described  i2 
Technologies  Inc.  in  Dallas  as 
the  vendor  with  the  most  in- 
depth  technology  for  manag¬ 
ing  supplier  relationships. 

Frictionless  Commerce  Inc. 
in  Cambridge,  Mass.,  also  sells 
an  integrated  purchasing  suite, 
and  it  teamed  up  with  Rock¬ 
ville,  Md.-based  supply  chain 
vendor  Manugistics  Group 
Inc.  last  summer  to  offer  a  uni- 


develop  new  products  and  the 
users  who  need  those  products 
to  meet  business  demands. 

“We  have  to  innovate  our 
way  out  of  this  recession  with 
new  technology,  new  prod¬ 
ucts,”  he  said.  “If  there  was 
ever  a  time  where  we  needed 
to  move  faster  down  the  tech¬ 
nology  curve,  this  is  it.” 

Intel  made  a  slew  of  product 
announcements  at  the  semi¬ 
annual  conference,  touting 
faster  processing  speeds  as  a 
key  feature.  Topping  the  list 
was  a  new  Pentium  4-based 
Xeon  processor  for  use  in  two- 
way  servers  (see  box).  The 
company  also  announced  that 
a  second-generation  version  of 
its  64-bit  Itanium  processor, 
code-named  McKinley,  will  be 
released  this  summer. 

New  Manufacturing  Process 

In  addition,  Barrett  said  Intel 
has  started  shipping  micro¬ 
processors  built  at  a  new  plant 
in  Oregon  that  uses  300mm 
wafers  and  its  0.13-micron 
manufacturing  process.  Five 
plants  worldwide  use  the  0.13- 
micron  technology,  he  said. 


fied  set  of  supplier  relation¬ 
ship  management  tools. 

Commerce  One  Inc.  in 
Pleasanton,  Calif.,  plans  to  add 
new  invoicing  and  contract 
management  applications  by 
midyear,  and  Peterson  said  en¬ 
terprise  resource  planning 
(ERP)  giants  such  as  SAP  AG 
and  Oracle  Corp.  are  also  de¬ 
veloping  full  suites  of  sourc¬ 
ing,  procurement  and  spend¬ 
ing  analysis  tools. 

Joseph  Marino,  an  analyst  at 
Current  Analysis  Inc.  in  Ster¬ 
ling,  Va.,  said  the  first  release 
of  Ariba’s  spending  analysis 
tool  “is  not  fully  developed  at 
this  point”  and  will  likely  re¬ 
quire  a  lot  of  fine-tuning. 

But  Marino  said  Ariba  and 
other  business-to-business 
vendors  can  still  beat  ERP  and 
supply  chain  vendors  on  pro¬ 
curement  functionality.  I 


Chips  In 
The  Bag 

Intel  announced  these  products 
last  week: 

A  Pentium  4-based  Xeon  processor 

that  boosts  the  speed  of  dual-CPU 
servers  by  up  to  80% 

A  companion  E7500  chip  set  that 
doubles  the  memory  bandwidth  of  Xeon- 
based  servers 

Three  single-chip  Gigabit  Ethernet 
controllers  for  use  in  PCs  and  servers 

A  line  of  network  and  storage  net¬ 
working  processors  based  on  Intel’s 
XScale  technology 


To  help  fuel  a  return  to 
growth,  Barrett  said,  IT  ven¬ 
dors  need  to  address  issues  re¬ 
lated  to  online  security  and  the 
use  of  technologies  such  as 
wireless  communications  and 
Web  services. 

Intel  itself  could  aid  in  im¬ 
proving  IT  security  by  provid¬ 
ing  increased  processing  pow¬ 
er  to  accommodate  demanding 
encryption  protocols,  said 
Graham  Titterington,  an  ana¬ 
lyst  at  Ovum  Ltd.  in  London. 

But  Titterington  and  other 
analysts  said  any  new  develop¬ 
ments,  such  as  stand-alone  en¬ 
cryption  chips,  probably  won’t 
be  available  in  products  for  at 
least  a  couple  of  years.  > 


Intel  Sticks  With  R&D  and 
Production  Spending  Plans 


NEW  PRODUCTS 


Judge  Denies  Xerox 
Injunction  Request 

A  federal  judge  in  Rochester,  N.Y., 
denied  Xerox  Corp.’s  request  for  an 
injunction  that  would  have  barred 
Palm  Inc.  from  selling  its  handheld 
devices.  Santa  Clara,  Calif.-based 
Palm  is  appealing  the  judge's  De¬ 
cember  ruling  that  it  and  former 
parent  company  3Com  Corp.  in¬ 
fringed  on  a  handwriting-recogni¬ 
tion  patent  held  by  Stamford, 
Conn.-based  Xerox. 


Sapient  Makes  22% 
Workforce  Cut . . . 

Sapient  Corp.  laid  off  about  545 
employees  in  the  third  round  of  cut¬ 
backs  at  the  e-business  consulting 
firm  during  the  past  12  months.  The 
new  layoffs  reduced  Cambridge, 
Mass.-based  Sapient’s  workforce  by 
22%.  The  company  also  warned 
that  its  first-quarter  loss  could  be 
slightly  larger  than  expected  and 
said  its  chief  financial  officer  is 
leaving  to  take  another  job. 


New  York-based  IT  consulting  firm 
Scient  Inc.  reported  pro  forma  rev¬ 
enue  of  $20  million  for  the  fourth 
quarter,  down  85%  from  $132  mil¬ 
lion  in  the  same  period  of  2000. 
Scient  said  it  lost  $55  million  in  the 
quarter,  compared  with  a  year- 
earlier  loss  of  $274  million.  The 
results  are  combined  for  the  former 
Scient  Corp.  and  iXL  Enterprises 
Inc.,  which  merged  in  November. 


Short  Takes 

Tulsa,  Okla.-based  broadband  net¬ 
work  operator  WILLIAMS  COMMU¬ 
NICATIONS  GROUP  INC.  said  it  may 
file  for  bankruptcy  protection  as 
part  of  a  debt  reduction  plan. . . . 
COMPAQ  COMPUTER  CORP.  has 
agreed  to  sell  a  server  printed  cir¬ 
cuit  board  manufacturing  plant  in 
Ayr,  Scotland,  to  St.  Petersburg, 

Fla. -based  JABIL  CIRCUIT  INC. 


#1  in  BusinessWeek's  2001  Buying  Guide 
Compaq  Evo  Notebook  N600c 

Mobile  Intel®  Pentium®  III  Processor  1.20GHz-M 

Designed  to  meet  the  needs  of 
professional  road  warriors 


Winner,  Network  World  Best  of 
the  Tests  Award,  Nov.  2001 
Compaq  ProLiant  DL380  Server 

Intel®  Pentium®  III  Processor  1.13GHz 

The  first  density-optimized  server  to  provide 
enterprise-class  availability  and  performance 
all  in  a  2U  form  factor 


Best  Desktop  PC,  Best  of  COMDEX  2001 

Compaq  Evo  D500  Ultra-Slim  Desktop 

Intel®  Celeron®  Processor  1.30GHz 

Powerful  combination  of  enterprise  security 
and  manageability 


1st  Class  Award,  Mobile 
Computing,  Feb.  2002 
Compaq  iPAQ  H3835  Pocket  PC* 


Powerful  and  expandable  pocket  PC  that 
enables  you  to  connect  to  your  office 


Compaq  Evo  Notebook  Compaq  ProLiant 
N600c  DL380  Server 


Compaq  Evo  D500  Compaq  Evo  Notebook 

Ultra-Slim  Desktop  N180 


$2,799 


Lease  for  as  low  as  $94 


•  Award-winning  integrated  wireless 
solution  via  MultiPort  technology 

•  Extended  battery  life  through  hot-swap 
battery  capability 

•  Mobile  Intel®  Pentium®  III  Processor 
1.20GHz-M 

•  14"  CTFT  SXGA+  and  32MB  DDR  Video 
Memory 

•  MultiPort  Wireless  Capable 

•  MultiBay  DVD-ROM/CD-RW  Combo  Drive 

•  Dual  Battery  Support 

•  30GB  Hard  Drive 


•  256MB  SDRAM,  1024MB  max 

•  56k  V.90  Modem  +  10/100  NIC 

•  3-year  limited  warranty* 


$3,528 


Lease  for  as  low  as  $118 


•  Intel®  Pentium®  III  Processor  1.26GHz 

•  256MB  Total  SDRAM  133MHz 
(2x128) — Included 

•  Integrated  Smart  Array  5i  Controller 

•  Hot  Plug  Drive  Cage-Ultra3  (5  x  1" 
and  1  x  1.6") 

•  18.2GB  Pluggable  Ultra3  SCSI  10,000 
rpm  Hard  Drive  (1") 

•  Standard  Quick  Deployment  Rails 

•  SmartStart  &  Compaq  Insight  Manager 

•  3-year  limited  warranty’ 


$699 


Lease  for  as  low  as  $24 


•  Pre-failure  replacement  warranty  on 
hard  drives 

•  Integrated  MultiPort  wireless  capable 

•  Hot-swap  MultiBay  technology 
provides  synergy  with  notebooks 

•  Intel®  Celeron®  Processor  1.30GHz 

•  Optional  MultiBay  24X  CD-ROM  Drive 

•  128MB  SDRAM,  512MB  max 

•  20GB  Ultra  ATA/100  Hard  Drive 

•  Integrated  Intel®  Pro/100  NIC 

•  Limited  warranty  with  three  years  parts, 
labor  and  on-site  service* 

•  Monitor  not  included 


$1,699  Lease  for  as  low  as  $57 

Perfect  for  high-end  applications  and 
digital  video  editing 

•  Largest  viewing  display  in  a  Compaq 
notebook 

•  Mobile  Intel®  Pentium®  III  Processor 
l.OOGHz-M 

•  15"  CTFT  XGA  and  16MB  DDR  Video 
Memory 

•  DVD-ROM  Drive 

•  20GB  Hard  Drive 

•  256MB  SDRAM,  1024MB  max 

•  56k  V.92  Modem  +  10/100  NIC 

•  1-year  limited  warranty* 


Compaq  PCs  use  genuine  Microsoft®  Windows® 
www.microsoft/piracy/howtoteil 

Prices  reflect  current  Internet  list  pricing  at  time  of  printing  and  are  subject  to  change.  ‘The  Compaq  iPAQ  H3835  Pocket  PC  is  a  retail  model  that  is  feature  equivalent  to  the  iPAQ  H3850  Pocket  PC  commercial  model.  "The  0%  lease  offer  is  available  through 
Compaq  Financial  Services  Corporation  (CFSC)  to  qualified  commercial  customers  in  the  U.S.  Financing  is  subject  to  credit  approval  and  execution  of  CFSC  documentation.  The  monthly  lease  payments  are  calculated  at  a  0%  implicit  lease  rate,  assuming 
lessee  does  not  exercise  a  fair  market  value  purchase  option  at  the  end  of  the  lease  term  and  timely  returns  leased  equipment  to  CFSC  at  the  end  of  the  lease  term  and  disregarding  any  charges  payable  by  lessee  other  than  rent  payments  (such  as  taxes, 
fees,  and  shipping  charges).  Lease  terms  of  up  to  30  months  are  available  for  qualifying  transactions  above  $499.  $0  down  excludes  a  first  rent  payment  due  in  advance.  Cost  of  operating  system  software  and  Compaq  Services  qualify  for  special  financing 
rates.  This  offer  is  valid  through  March  31, 2002  to  qualified  commercial  customers  in  the  U.S.,  subject  to  credit  approval  and  execution  of  CFSC  lease  documentation.  Other  restrictions  may  apply  and  CFSC  reserves  the  right  to  change  or  cancel  this 
program  at  any  time  without  notice.  'Certain  restrictions  and  exclusions  apply.  Consult  the  Compaq  Customer  Support  Center  for  details.  All  prices  subject  to  change  without  notice.  Compaq,  the  Compaq  logo,  Evo,  ProLiant,  iPAQ  and  Inspiration  Technology 
are  trademarks  of  Compaq  Information  Technologies,  L.P.  in  the  U.S.  and  other  countries.  Intel,  the  Intel  Inside  logo,  Pentium,  and  Celeron  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other 
countries.  Other  products  mentioned  herein  may  be  trademarks  of  their  respective  companies.  Compaq  is  not  liable  for  editorial,  pictorial  or  typographical  errors  in  this  advertisement.  ©2002  Compaq  Information  Technologies,  LP. 
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WHAT  MAKES  COMPAQ  TECHNOLOGY  SO  VALUABLE? 

ASK  THE  CRITICS. 


What  makes  a  best  buy?  How  about  advanced  technology, 
practical  versatility,  responsive  technical  support.  And  those 
are  just  a  few  of  the  many  qualities  that  put  Compaq  at  the 
top  of  every  shrewd  purchaser’s  list. 

Compaq  CarePaq  Services  provide  a  variety  of  upgrades  to 
enhance  the  base  warranty  on  your  Compaq  products. 
Lease  for  $0  down,  0%  interest  monthly.** 


Compaq  ProLiant  ML350 
Server 


Compaq  Evo  Desktop 
D300v  Microtower 


Compaq  iPAQ  H3850 
Pocket  PC 


$2,428 


Lease  for  as  low  as  $81 


Provides  the  perfect  balance  of  price  and 
performance 


•  Intel®  Pentium®  III  Processor  1.26GHz 

•  128MB  Total  SDRAM  133MHz 
(1x128) — Included 

•  Integrated  Dual  Channel  Wide-Ultra3 
SCSI  Adapter 

•  Hot  Plug  Ultra3  Cage  6  xl"  Cage — Included 

•  18.2CB  Pluggable  Ultra3  SCSI  10,000  rpm 
Hard  Drive  (1") 

•  SmartStart  &  Compaq  Insight  Manager 

•  3-year  limited  warranty' 


$579 


Lease  for  as  low  as  $20 


Affordable  business  computing  solution 


•  Intel®  Celeron®  Processor  1.30GHz 

•  48X  CD-ROM  Drive 


•  128MB  SDRAM,  512MB  max 

•  20GB  Ultra  ATA/100  Hard  Drive 

•  Integrated  Intel®  Pro/100  NIC 

•  Microsoft®  Windows®  XP  Professional 

•  Limited  warranty  with  one  year  parts,  labor 
and  on-site  service' 

•  Monitor  not  included 


$599 


Lease  for  as  low  as  $20 


•  206MHz  Intel®  StrongARM  Processor 
SA-1110  32-bit  RISC 

•  64MB  SDRAM,  32MB  Flash  ROM  Memory 

•  Reflective  TFT  Display  with  64K  colors 

•  Built-in  secure  digital  slot  for  memory 
expansion 

•  Microsoft®  Pocket  PC  2002  Operating 
System  with  Pocket  Outlook  and 
Pocket  Office 

•  Handwriting  recognition,  virtual 
keyboard,  character  recognition,  voice 
recognition 

•  1-year  limited  warranty' 


For  latest  pricing,  call  toll  free 

Buy  direct  from  Compaq  at  888-349-5559, 
compaq.com/awardwinning/cworid, 
or  visit  your  local  reseller. 


COMPAQ 

Inspiration  Technology 
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PATRICIA  KEEFE 


The  Question  for  2002 


« 


HAT  HAVE  YOU  done  for 
me  lately?”  may  well  be 
the  question  for  2002.  Be  it 
companies  asking  workers 
or  workers  asking  compa¬ 
nies,  that  cry  hangs  endlessly  in  the  air  as  revenue- 
stressed  businesses  forget  to  care  and  workers 
struggle  to  remain  motivated.  For  most  of  us,  this 


W 


means  more  pressure  to 
increase  our  workloads. 

IT  management  is  un¬ 
der  intense  pressure  to 
think  up  new  ways  to  cut 
costs,  increase  revenue  or 
improve  productivity. 

There’s  no  time  for  rest¬ 
ing  on  past  laurels  when 
even  greater  heroics  are 
demanded.  In  our  Busi¬ 
ness  section  this  week 
(page  28),  we  look  at 
three  IT  leaders  who  met 
that  challenge.  Each  delivered  solu¬ 
tions  that  not  only  addressed  current 
problems  but  will  also  provide  pay¬ 
offs  down  the  road. 

One  is  Fran  Dramis  at  BellSouth, 
who  designed  a  technology  transfor¬ 
mation  road  map  to  help  business 
units  define  the  systems  they  need  to 
enhance  and  grow  revenue  —  not 
just  for  today,  but  for  years  to  come. 

To  view  IT  heroics  on  a  national 
scale,  check  out  our  Page  One  up¬ 
date  on  what  happened  to  the  flood 
of  offers  of  technical  assistance  in 
the  wake  of  the  Sept.  11  attacks.  Our 
stories  look  at  just  a  few  of  the  many 
inspiring  actions  taken  by  IT  profes¬ 
sionals  willing  to  look  beyond  their 
personal  pain  to  find  ways  to  con¬ 
tribute.  For  many,  the  question  be¬ 
came,  “What  can  I  do  for  my  com¬ 
munity  now?”  not,  “What  has  my 
community  done  for  me  lately?” 

Indeed,  hundreds  of  thousands  of 
IT  volunteers  signed  up,  and  many 
were  tapped.  Because  of  them,  an 
unbelievable  amount  of  progress  was 
made.  But,  as  our  report  uncovers, 
we  also  need  an  organizational  road 
map  to  make  sure  we’re  better  pre- 


patricia  keefe  is  editorial 
director  at  Computer- 
world.  You  can  contact 

her  at  patricia.keefe® 
computerworid.com. 


pared  to  harness  our  na¬ 
tion’s  collective  IT  re¬ 
sources  the  next  time 
disaster  strikes. 

The  problem?  A  ca¬ 
cophony  of  well-meaning 
efforts  all  targeting  the 
same  goal  —  matching 
up  IT  professionals  and 
equipment  with  compa¬ 
nies  needing  assistance 
—  but  with  different  ap¬ 
proaches  and  levels  of 
expertise.  Many  offers  of 
assistance  went  unheeded  as  a  re¬ 
sult,  and  yet  the  need  is  more  impor¬ 
tant  than  ever.  (See  our  list  of  links 
for  places  to  donate,  page  6.) 

Here  are  some  suggestions  of  what 
you  can  do  in  the  meantime: 

■  Back  the  efforts  of  Sen.  Ron 
Wyden  (D-Ore.),  chairman  of  the 
Senate  Subcommittee  on  Science, 
Technology  and  Space,  to  create  a 


“national  emergency  technology 
guard.”  It  would  provide  a  single 
point  of  contact  and  clear  chain  of 
command  to  coordinate  the  science 
and  technology  sectors  to  prevent 
and  respond  to  disasters.  Services 
delivered  by  this  agency  would 
include  a  database  of  IT  profession¬ 
als  willing  to  help  out,  complete 
with  equipment  and  donations  they 
can  offer;  a  reserve  of  equipment 
needed  in  an  emergency;  clear 
guidelines  for  businesses  affected; 
an  emergency  hot  line  and  Web  site; 
and  a  large-scale  risk  management 
strategy  to  protect  critical  infra¬ 
structure. 

■  Contact  the  New  York  Software 
Industry  Association,  which  will  de¬ 
vote  its  annual  summit,  being  held 
March  8,  to  help  further  centralize 
business  relief  efforts. 

■  Register  with  groups  such  as 
Restart  Central,  an  aid  program 
created  by  several  New  York  City 
groups  that  has  so  far  matched  more 
than  850  donations  and  volunteers 
and  is  still  working  with  about  260 
businesses,  most  of  which  are  look¬ 
ing  for  permanent  office  space  and 
basic  office  equipment. 

It’s  time  we  all  looked  into  the  mir¬ 
ror  once  again  and  asked,  “What 
have  I  done  lately  for  my  company, 
my  co-workers,  my  country?”  I 
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PIMM  FOX 

Portals  Can 
Open  Array 
Of  Services 

Measuring  the  val¬ 
ue  of  enterprise 
portals  is  more  art 
than  science. 

But  don’t  let  that  sway  you 

from  embracing  them  to  consolidate 
disparate  back-end  application  services 
through  self-ser¬ 
vice  front  ends 
to  save  money 
and  boost  rev¬ 
enue.  Tread 
carefully,  though, 
because  there 
are  obstacles. 

“The  problem 
with  portals  is 
not  technology, 
but  rather  orga¬ 
nizational  obsta¬ 
cles  defining 
goals,  adopting  a  clear  business  plan 
and  even  how  you  describe  different 
portal  features,”  says  Nate  L.  Root,  an 
analyst  at  Forrester  Research. 

Vendors  contribute  to  this  mess. 
Their  out-of-the-box  adapters  to  back¬ 
end  legacy  applications  and  outside 
Web  services  seem  an  easy  win.  But 
single-source  adapters  will  never  be 
enough  to  get  your  portal  humming. 

To  start  the  portal  process  and  get 
buy-in  from  the  chief  financial  officer, 
look  at  your  ERP  implementations  for 
opportunities  to  streamline  access  to 
services.  For  example,  a  portal  could 
replace  an  in-house  travel  reservation 
system,  dropping  money  to  the  bottom 
line.  Define  specific  functions  inside 
packaged  applications  from  vendors 
such  as  SAP,  PeopleSoft  and  Siebel 
Systems  that  could  help  users  do  their 
jobs.  Delivery  of  employee-benefit  up¬ 
dates  or  adjustments  to  production 
schedules  are  self-service  activities 
ideal  for  portal  delivery. 

This  means  understanding  features 
that  transform  a  portal  into  more  than 
just  a  source  for  sports  scores  and 
company  holiday  information.  Recog¬ 
nize  that  adding  portal  users  could  put 
a  strain  on  ERP  applications,  and  think 

For  more  Computerworld 
columnists  and  links  to  archives 
of  previous  columns,  head  to: 

www.computerworld.com/q7q1000 
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computerworld.com. 
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about  near-real-time  caches  to  prevent 
outages. 

Portal  design  should  incorporate 
functions  to  save  money,  rather  than 
show  off  technology.  Just  because  a 
call  center  action  touches  three  differ¬ 
ent  back-end  systems  isn’t  justification 
for  making  it  a  portal  feature.  “It  might 
cost  more  to  get  rid  of  those  manual 
touch  points  while  adding  unwarrant¬ 
ed  complexity  to  the  portal,”  says  Root. 

And  don’t  confuse  portals  with 
application  integration  from  compa¬ 
nies  such  as  SeeBeyond  Technology, 
TTBCO  Software  and  Vitria  Technolo¬ 
gy.  Portals  are  about  service,  not  appli¬ 
cation  integration. 

Purchase  application  servers  first, 
rather  than  portal  or  integration  serv¬ 
ers,  because  application  servers  drive 
portal  transactions.  And  with  portals 
costing  more  than  $1  million  to  devel¬ 
op,  according  to  Forrester,  you  should 
base  portal  and  integration  server  deci¬ 
sions  around  the  use  of  common  code. 

Plumtree  Software,  the  market 
leader  in  portal  products,  offers  a  dis¬ 
crete  portal  server,  but  you  can  also 
take  advantage  of  your  application 
server  infrastructure  to  develop  portal 
technology.  For  instance,  IBM  and  BEA 
Systems  let  you  use  application  server 
tools  to  develop  portal  technology. 

Portals  hold  a  lot  of  promise,  but 
they  require  special  attention  before 
they’ll  pay  dividends.  I 

DAVID  FOOTE 

Good  Ethics 
At  Work  Lie 
In  the  Hiring 

THE  ENRON  mess  sure 
seems  to  be  opening  up 
a  lot  of  old  wounds. 

For  instance,  several  years 

ago,  I  was  employed  by  a  pop¬ 
ular  consumer  electronics  company, 
until  it  lost  half  its  stock  value  over¬ 
night  when  it  was  accused  of  playing 
fast  and  loose  with  its  financials. 
Thankfully,  being  fresh  out  of  school,  I 
had  only  my  mind  to  lose  instead  of  a 
fat  retirement  account. 

One  must  be  careful  talking  about 
crooked  executives,  though.  Chicanery 
at  the  highest  levels  of  corporate 
America  has  been  tolerated  —  even  ro¬ 
manticized  in  books  and  films  —  since 
the  Rockefellers,  Mellons  and  Ken- 
nedys  made  their  fortunes.  It’s  part  of 


our  culture.  And  it’s  not  like 
we  haven’t  heard  populist 
politicians  before  preaching 
reform  when  hard-working 
employees  are  suddenly 
feeling  abused. 

Public  concern  about 
ethics  is  cyclical,  like  hem¬ 
lines  and  teenagers’  musical 
tastes.  In  vogue  now  are  cor¬ 
porate  accounting  practices, 
privacy  concerns  and  execu¬ 
tive  greed.  When  several  on- 
the-brink  dot-coms  wanted 
to  sell  their  online  customer 
lists,  consumer  advocates 
protested.  When  employers 
began  to  monitor  workers’ 
e-mails  and  Web  surfing  behaviors, 
employees  and  privacy  advocates 
stewed.  And  there  are  always  suspi¬ 
cions  about  relationships  between  ven¬ 
dors  and  IT  executives,  and  between 
recruiters  and  IT  workers. 

We  in  IT  have  a  choice:  subscribe  to 
some  code  of  ethics,  or  don’t.  But  no 
policy,  program,  employer  or  govern¬ 
ment  can  force  us  to  make  this  choice. 
On  the  other  hand,  no  one  forced  peo¬ 
ple  to  work  for  Enron  or  to  play  Russ¬ 


ian  roulette  with  their  re¬ 
tirement  accounts. 

Don’t  expect  clarity  on 
what  passes  for  ethics.  De¬ 
ciding  where  to  draw  the 
line  on  business  behavior 
reminds  me  of  the  inability 
of  Supreme  Court  Justice 
Potter  Stewart  in  1964  to 
adequately  explain  what 
constituted  pornography 
and  obscenity.  Instead,  he 
declared,  “I  know  it  when  I 
see  it.”  The  same  holds  true 
for  us.  Ultimately,  we’ll 
know  the  companies  that 
best  match  our  personal 
codes  of  ethics  and  should 
select  them  as  our  ideal  employers. 

This  hasn’t  stopped  companies  from 
attempting  to  police  ethical  matters, 
including  by  using  these  strategies: 

Making  employees  sign  a  code  of  ethics. 
Lists  of  ethical  standards  and  practices 
are  simply  corporate  liability  boiler¬ 
plates  that  undermine  trust  and  are 
largely  ignored  by  workers. 

Hiring  an  ethics  consultant.  College 
professors  moonlight  as  consultants  to 
arbitrate  employer-employee  show¬ 


downs  on  ethical  matters  and  to  help 
employers  refine  policies  and  practices 
on  corporate  values  and  ethics. 

Though  helpful,  they  typically  arrive 
too  late  to  change  anything  truly  con¬ 
sequential  and  have  trouble  navigating 
ethics  in  the  real  world  of  businesses 
operating  under  extreme  pressure  to 
grind  out  profits. 

Appointing  a  chief  ethics  officer.  Along 
with  an  independent  ethics  review 
group  advising  the  board  of  directors, 
“the  other  CEO”  is  tasked  with  keeping 
alive  the  notion  that  ethical  concerns 
do  matter.  This  sounds  good,  but  reali¬ 
ty  dictates  that  this  is  viable  only  for 
companies  in  which  the  chief  execu¬ 
tive’s  power  and  influence  have  been 
sufficiently  checked  and  balanced. 

The  only  true  way  to  enforce  ethical 
behavior  norms  is  to  select  and  hire 
the  right  people.  With  a  focus  on 
personal  and  professional  ethics  up¬ 
front,  enforcement  is  much  easier,  and 
outcomes  are  more  predictable.  But 
this  must  start  at  the  CXO  level  so 
that  appropriate  behaviors  can  be 
modeled  by  the  workforce  in  the  same 
fashion  we  model  our  parents’  ethical 
imprinting.  I 
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Make  Spammers  Pay 

N  “Spam  Taking  a  Toll  on 
Business  Systems” 
[News,  Feb.  18],  Todd 
Meagher  of  Credit.com  said 
the  potential  loss  of  legiti¬ 
mate  business  correspon¬ 
dence  inherent  in  blocking 
spam  is  an  acceptable  price 
to  pay.  It’s  outrageous  that 
people  feel  that  helpless. 
Spam  costs  businesses  lots 
of  money.  That  cost  should 
be  borne  by  the  spammers, 
and  tough  legislation  needs 
to  be  enacted  to  let  compa¬ 
nies  sue  those  who  deluge 
their  in-boxes  with  spam.  In 
addition,  those  who  send 
sexually  explicit  spam  to  ad¬ 
dresses  accessible  by  chil¬ 
dren  need  to  be  prosecuted. 

There  are  a  few  things 
people  can  do  to  fight  spam. 
First,  use  an  ISP  that  pro¬ 
vides  spam  filtering.  Sec¬ 
ond,  report  spam  to  Spam- 
Cop.net,  which  will  parse 
the  headers  and  determine 
the  real  source.  You  can  then 
notify  all  the  systems  admin¬ 
istrators  involved  that  their 


systems  have  been  used  by  a 
spammer.  But  the  most  ef¬ 
fective  thing  is  to  hit  spam¬ 
mers  where  it  really  hurts: 
in  the  pocket.  To  do  that, 
don’t  buy  anything  from  a 
spammer,  and  ask  your  con¬ 
gressman  to  enact  legisla¬ 
tion  to  make  spammers  pay. 
Chuck  Hamilton 
Oracle  DBA 
QVC  Inc. 

West  Chester,  Pa. 


A  Matter  of  Forms 

Joe  AUER’S  article  “A  Form 
for  Fairness”  [Business, 
Feb.  11]  really  hit  the  nail 
on  the  head.  We’ve  been  us¬ 
ing  form  contracts  for  sever¬ 
al  years  with  varying  degrees 
of  success.  I  don’t  recall  see¬ 
ing  a  better  argument  in  sup¬ 
port  of  the  development  and 
use  of  form  contracts. 

Thanks  for  the  insight. 

Jim  Garrison 

Assistant  director/contract 

management 

Purchasing  Department 

North  Carolina  State  University 

Raleigh 


On  the  Wrong  Trail 

Frank  hayes’  “The  Sto¬ 
ry  So  Far”  [CRM 
Knowledge  Center, 

Feb.  18]  wasn’t  a  history  of 
customer  relationship  man¬ 
agement  but  of  prospect  re¬ 
lationship  management. 

The  trail  he  should  have  fol¬ 
lowed  was  that  of  the  field 
service  products  of  the  early 
1980s  (FieldWatch,  Metrix, 
Decision  Sciences)  and  cus¬ 
tomer  support  products  of 
the  late  ’80s  (Clarify,  Van- 
tive,  CustomerSoft,  Clien¬ 
tele  and  many  others). 

Jacky  Hood 
President 

Crescent  Project  Management 
Mountain  View,  Calif. 


Finding  a  Future  in  IT 

ELISSA  SOLOMON’S 
“Layoff  Lessons 
Learned”  [Busi¬ 
ness,  Feb.  11]  was  a  perti¬ 
nent,  well-written  article. 
The  “10  Tips  for  Job  Seekers” 
sidebar  mentions  the  New 
York-based  organization  Fu¬ 


tures  in  Information  Tech¬ 
nology,  and  I  am  interested 
in  learning  more.  Could  you 
assist  with  a  Web  link? 
Arnold  M.  Abate  Jr. 

LAN  administrator 
Verizon/MSX  International 
Niskayuna,  N.Y. 

Editor’s  note:  Futures  in  In¬ 
formation  Technology 
(www.futuresinit.org)  of¬ 
fers  free  career  counseling, 
job  placement  services  and 
technical  training  to  unem¬ 
ployed  IT  professionals  in 
the  New  York  tri-state  area. 

COMPUTERWORLD  welcomes 
comments  from  its  readers.  Letters 
will  be  edited  for  brevity  and  clarity. 
They  should  be  addressed  to  Jamie 
Eckle,  letters  editor.  Computerworld, 
PO  Box  9171, 500  Old  Connecticut 
Path,  Framingham,  Mass.  01701. 

Fax:  (508)  879-4843.  Internet: 
letters@computerworld.com.  Include 
an  address  and  phone  number  for 
immediate  verification. 


For  more  letters 
on  these  and  other 
topics,  visit  our 
Web  site: 

www.computerworid.com/q7q5000 
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Deploying  Windows  shouldn't  force  you  to  find  your  'happy  place.'  Phoenix  Technologies,  producers  of  BIOS 
firmware,  now  introduces  ImageCast  as  part  of  its  new  software  product  line.  ImageCast  takes  the  headache 
out  of  your  Windows  deployment, 

•  •  Simply  integrate  with  Microsoft  Sysprep  using  ImageCast's  post  configuration  utility. 

•  Save  time  with  centralized  image  management  for  OS  and  application  deployment. 

•  Quickly  boot  workstations  for  OS  deployment  with  PXE  and  Wake  O1'  LAN. 

•  Easily  automate  layered  workstation  deployments  for  touchless  integration  into  your  environment. 


'  ■ 


If  you  are  seeking  deploymentherapy,  download  a  trial  version  of  ImageCast  today! 
Visit  us  at  www.Phoenix.com. 
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THIS  WEEK 


DELIVERING  THE  GOODS 

CEOs  and  chief  financial  officers 
expect  their  IT  leaders  to  come  up 
with  ideas  to  help  their  organiza¬ 
tions  slash  costs  and  pump  up  sales 
in  good  times  and  bad.  Read  how 
three  movers  and  shakers  are  get¬ 
ting  the  job  done.  PAGE  28 


RIGHTING  THE  SHIP 

CIO  Tom  Murphy  inherited  a  dys¬ 
functional  IT  organization  when 
he  joined  Royal  Caribbean  Cruises 
Ltd.  in  April  1999.  Thanks  to  his 
dynamic  motivational  and  leader¬ 
ship  skills,  he’s  put  the  IT  depart¬ 
ment  back  on  course.  PAGE  30 


WORKERS 


IN  THE 


BOOK  REVIEWS 

Find  out  what  our  reviewers  have 
to  say  about  a  new  book  with  ad¬ 
vice  about  managing  and  motivat¬ 
ing  Einsteins,  a  primer  on  running 
a  “conductorless”  organization  and 
a  soup-to-nuts  guide  for  project 
managers.  PAGE  34 


DIVERSITY 

Women  in  IT  typically  fall  into  one 
of  two  categories  when  dealing  with 
perceived  gender  barriers  at  work: 
“Woe  is  me”  or  “Says  who?”  writes 
Kathleen  Melymuka.  PAGE  36 


PAUL  A.  STRASSMANN 


Out  of  Alignment 

I  HAVE  ALWAYS  BEEN  AMUSED  by  simplistic  methods  offered  to 
CIOs  to  answer  complex  questions  about  the  health  of  IT.  One  re¬ 
cent  attempt  is  particularly  noteworthy  because  it  received  wide¬ 
spread  publicity  and  reputable  endorsements. 

Last  fall,  a  journal  for  CIOs  published  a  five-page  feature,  adver¬ 
tised  as  a  diagnostic  tool,  with  the  ambitious  title  “How  to  Improve  IT/ 
Business  Alignment.”  Introductory  explanations  claimed  that  this  tech¬ 


nique  was  successfully  tested  with  more  than  25  For¬ 
tune  500  companies  and  used  in  studies  sponsored 
by  the  Society  for  Information  Management  and  The 
Conference  Board. 

It  required  the  placement  of  check  marks  on  a  grid 
consisting  of  five  columns  and  38  lines  representing 
38  questions.  A  check  mark  in  the  first  column  was 
worth  one  point,  a  mark  in  the  second  column  two 
points,  and  so  forth,  with  five  points  for  each  mark  in 
the  fifth  column.  A  respondent  could  score  anywhere 
from  38  to  190  points,  with  a  relatively  high  score 
signaling  a  high  level  of  IT  alignment  with  the  rest  of 
the  business.  The  proponents’  assumption  was  that 
the  higher  the  score,  the  stronger  the  alignment,  and 
therefore  the  more  benefits  a  business  would  see, 
which  would  ultimately  be  reflected  in  its  financial 
performance.  For  instance,  if  a  CIO  reported  to  the 
CFO,  that  would  be  worth  one  point.  If  the  CIO  re¬ 
ported  to  the  CEO,  that  would  be  five  points.  “Rarely 
measuring  the  value  of  IT  investments”  was  worth 
one  point,  but  using  a  balanced  scorecard  approach 
awarded  you  five  points.  Other  characteristics  that 
were  scored  included  service-level  agreements,  how 
projects  are  prioritized  and  architectural  integration. 

The  publicity  given  to  this  methodology  and  its 
claims  heightened  my  curiosity  about  its 
value.  As  a  scorekeeper  of  corporate  prof¬ 
itability  and  IT  spending,  I  offered  to  test 
the  tool’s  validity.  The  researchers  gra¬ 
ciously  provided  me  with  each  corpora¬ 
tion’s  individual  score  (subject  to  an  agree¬ 
ment  to  not  reveal  the  identities  of  the 
firms  or  researchers). 

My  findings?  After  I  compared  the  align¬ 
ment  scores  with  the  actual  financial  results 
delivered  by  the  firms  that  were  used  to  test 
the  methodology,  I  found  absolutely  no  re¬ 
lationship  between  the  overall  score  and 
other  independent  measures  of  financial 
results.  There  were  high-scoring  firms  that 
were  losing  money,  and  there  were  low- 
scoring  firms  that  delivered  exceptional 


profits.  So  the  methodology  failed  in  perhaps  its  most 
important  test  of  relevance  to  a  board  of  directors. 

I  view  that  as  an  example  of  contemporary  astro¬ 
logical  practice  as  applied  to  assessing  IT  excellence. 
Astrology,  in  which  I  take  an  active  interest,  takes 
factual  observations  about  stars,  planets  and  the  cal¬ 
endar  and  converts  them  —  by  unverifiable  methods 
—  into  prophecies  about  events  on  Earth.  I  would 
classify  any  method  for  cobbling  together  descrip¬ 
tions  about  IT-related  practices  into  predictions 
about  IT  excellence  as  being  like  astrology  rather 
than  an  application  of  reproducible  analysis  that  can 
help  IT. 

Executive  Implications 

I  have  seen  many  examples  of  methodologies  that 
follow  similar  patterns.  Some  are  relatively  modest 
and  perhaps  involve  filling  out  a  grid.  Others  are 
ambitious,  often  asking  that  more  than  150  line  items 
be  scored  via  elaborate  schema.  This  includes  most 
of  the  measurements  of  an  organization’s  “maturity 
level.”  The  widely  applied  balanced  scorecards  dis¬ 
guise  their  astrological  origins  by  arbitrary  choices 
of  ratings  criteria.  For  instance,  one  requirement  to 
qualify  a  firm’s  ranking  of  its  computing  innovation 
attributed  20%  of  that  score  to  whether  it 
installed  the  latest  version  of  Windows  on 
all  desktops! 

All  of  these  methods  measure  criteria 
that  are  mostly  unrelated  to  top  executive 
concerns,  which  are  primarily  economic. 

In  other  words,  CEOs  couldn’t  care  less 
about  conformity  with  what  academia 
claims  are  desirable  behaviors.  What  they 
do  care  about  is  increasing  profitability 
and  whether  IT  is  helping  to  do  that. 

As  IT  management  and  budgets  come 
under  increasing  scrutiny  today,  don’t 
bank  on  scoring  well  using  astrologylike 
methods.  Proving  that  dollars  saved  and 
earned  will  add  to  the  bottom  line  will 
count  for  more.  ► 


PAUL  A.  STRASSMANN 
(paul@strassmann.com) 

believes  that  astrology¬ 
like  methods  are  popular 
ways  to  measure  the 
health  of  IT  because 
they're  cheap,  don’t 
require  much  effort  and 
avoid  accountability. 
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BOB  COATES  (fourth  from  the  right),  CIO  at  Edwards  Theatres  Circuit,  helped  automate  cash  flow  for  one  of  the  largest  theater  chains  in  the  U.S. 


GOT  A  SUCCESS 
STORYTO  SHARE? 

OTell  it  to  our  business  editor  at 

bizeditor@computerworld.com. 


Position:  CIO 

Edwards  Theatres  Circuit  Inc. 

Newport  Beach,  Calif. 

The  prop  Automating  cash  flow  and  account¬ 
ing  processes 

Cut  from  three  months  to  two  weeks 
the  amount  of  time  needed  to  “close  the  books” 
for  each  week  of  a  movie’s  run;  accurately 
divides  box-office  receipts  between  studios 
and  theaters  quickly  to  avoid  overpayments. 
Who  is  Coatee  A  20-year  veteran  of  command- 
and-control  systems  in  the  Marine  Corps, 

Coates  moved  into  civilian  life  first  as  a  People- 
Soft  manager  at  Anaheim,  Calif.-based  CKE 
Restaurants  Inc.,  which  runs  the  Hardee’s  and 
Carl’s  fast-food  chains.  The  former  chief  finan¬ 
cial  officer  at  CKE  lured  him  into  the  movie  busi¬ 
ness  a  year  later,  in  early  1999. 


Bob 

Coates 

running  a  string  of  movie  theaters 
is  dicey  in  the  best  of  times.  Not  only 
must  you  book  the  most  profitable 
movies;  you  also  have  to  negotiate  and 
track  arcane  formulas  to  split  the  take 
with  movie  studios,  attract  the  crowds, 
sell  the  concessions  and  manage  your 
cash.  That’s  especially  tough  in  a  mar¬ 
ket  so  overbuilt  that  many  of  the 
biggest  players  have  filed  for  bankrupt¬ 
cy  protection. 


What  Have  You  Done 
For  Me 


CEOs  and  CFOs  demand  that  their  IT 
leaders  come  up  with  brilliant  ideas  for  slashing  costs, 
pumping  up  sales  or  improving  productivity.  Here’s  a  look 
at  three  hard-chargers  who  have  delivered. 


The  main  problem  is  knowing  how 
much  money  you’re  taking  in  and  how 
much  to  put  aside  for  the  studios:  Put 
aside  too  little,  and  you  have  to  make  it 
up  later;  too  much,  and  you  have  to 
borrow  to  keep  the  business  running. 

“You’re  constantly  in  a  battle  to  man¬ 
age  your  cash,”  says  Alan  Davy,  execu¬ 
tive  vice  president  and  head  film  buyer 
at  Edwards,  a  $350  million  chain. 

Until  a  few  years  ago,  Edwards  did 
that  with  “pencil  and  pad  and  clerks  in 
green  eyeshades,”  says  Davy.  Aside 
from  a  J.D.  Edwards  &  Co.  accounting 
system  used  to  cut  checks,  the  opera¬ 
tion  had  almost  no  computers. 

One  of  the  first  jobs  facing  Coates 
when  he  became  the  company’s  first 
CIO  was  to  automate  that  process  — 
both  to  save  money  and  to  give  man¬ 
agers  a  tighter  grip  on  the  business. 

Although  he  had  no  legacy  systems 
to  add  to  his  headaches,  Coates  had  to 
convince  senior  management  to  pay 
for  a  cash-flow  system,  a  standardized 
point-of-sale  system  and  a  wide-area 
network  to  connect  them.  He  also  had 
to  push  for  standardized  business  prac¬ 
tices  so  the  results  would  make  sense. 
His  task  was  complicated  by  the  fact 
Edwards  had  filed  for  Chapter  11  bank¬ 
ruptcy  protection  in  early  2000  (it 
emerged  from  bankruptcy  in  Septem¬ 
ber  2001). 

The  result  was  a  cash-flow  automa¬ 
tion  system  nicknamed  RITA  (for  reli¬ 
able,  integrated,  timely  and  accurate) 
that  was  built  in  Visual  Basic  6  on  top 
of  a  SQL  Server  2000  database.  The¬ 
ater  managers  upload  results  nightly, 
and  the  system  calculates  revenue  and 
payments  due  to  studios  and  shunts 
data  into  a  data  mart  and  a  series  of  re¬ 
ports  that  give  managers  online  access 
to  current  results.  Development  start¬ 
ed  in  November  1999  and  was  complet¬ 
ed  in  December  of  last  year  at  a  total 
cost  of  about  $1  million,  Coates  says. 

“The  old  way  was  a  monumentally 
cumbersome  system,”  Davy  says. 

“Now,  I  can  do  most  of  it  online  and 
make  changes  quickly.”  I 

—  Kevin  Fogarty 
kevinjfogarty@yahoo.com 
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BUSINESSROI 


INVESTING  IN  A  NEW  CUSTOMER  ORDERING  SYSTEM  “allowed  us  to  increase  customers 
at  fairly  negligible  systems  costs,”  says  Fran  Dramis,  CIO  at  BellSouth. 


Fran 

Dramis 

in  FEBRUARY  of  last  year,  BellSouth 
had  a  choice:  hobble  forward  on  a  lega¬ 
cy  customer  ordering  system  or  invest 
in  a  new  one  that  would  better  support 
thousands  of  new  broadband  sub¬ 
scribers  —  a  linchpin  customer  seg¬ 
ment  in  the  company’s 
revenue  strategy. 

It  may  sound  like  a 
no-brainer,  but  given  the 
post-dot-com  capital 
constraints  plaguing  the 
entire  telecommunica¬ 
tions  industry,  it  was 
anything  but  an  easy 
decision. 

Following  Dramis’ 
technology  transforma¬ 
tion  road  map  —  which 
he  designed  to  help  busi¬ 
ness  units  define  the  sys¬ 
tems  they  need  to  build 
revenue  —  BellSouth 
ultimately  got  the  new 
ordering  system. 

It  took  nine  months  to 
implement  a  customized 
version  of  Oracle  Corp.’s 
customer  relationship  management 
software,  which  was  integrated  with 
proprietary  ordering  features  in  other 
BellSouth  systems.  This  gave  new  sub¬ 
scribers  the  ability  to  order  and  even 
self-install  the  software  they  would 
need  to  get  up  and  running  on  the 
Assymmetric  Digital  Subscriber  Line 


(ADSL)  high-speed  service. 

The  result:  By  year’s  end,  BellSouth’s 
broadband  customer  base  had  grown 
from  200,000  to  660,000,  with  90%  of 
customers  using  the  self-service  op¬ 
tion.  The  effort  has  also  resulted  in  a 
50%  decrease  in  per-subscriber  order¬ 
ing  costs  because  the  new  system  sup¬ 
ports  more  customers  at  a  lower  cost 
than  the  previous  one  and  captures 
more  customer  information.  That,  in 
turn,  works  to  reduce  the  number  of 
help  desk  calls  that  have  to  be  fielded 
and  helps  to  identify  new  services  and 
capabilities  that  cus¬ 
tomers  want. 

One  new  service  is  a 
telecommuting  billing 
option,  which  lets  com¬ 
panies  aggregate  billing 
for  ADSL  services  they 
provide  to  remote 
workers. 

“All  of  this  allowed  us 
to  increase  customers  at 
fairly  negligible  systems 
costs,”  says  Dramis. 
“And  these  are  all 
things  that  help  the 
growth  activities  of  the 
business.” 

For  example,  he  says, 
just  a  few  years  ago,  the 
company’s  annual 
ADSL  revenue  generat¬ 
ed  no  more  than  “a 
couple  of  million  dollars.”  This  year, 
it’s  a  half-billion-dollar  business  for 
BellSouth. 

“What  Fran  really  does  is  set  the 
strategic  direction,”  says  Lori  Groves, 
the  project  leader  on  the  ADSL  order¬ 
ing  system  project.  ft 

—  Julia  King 


Position  CIO 

Company  BellSouth  Corp. 
Location:  Atlanta 
The  project:  Implementing 
a  new  ADSL  ordering 
system 

The  payoff  Slashed  costs 
in  half 

The  secret  to  Dramis’ 
work/lrfe  balance;  “I  coach 
my  son’s  football  team.  If 
I’ve  got  a  late  meeting  and 
practice  on  the  same  day,  I 
put  on  my  coach’s  uniform 
under  my  suit.  Then  I  can 
leave  the  office  and  head 
straight  for  the  practice 
field.  It’s  a  little  bulky  un¬ 
der  my  suit,  but  it  works, 
and  it’s  worth  it!” 


Raul 

McKeon 

success  in  pub¬ 
lic  relations  de¬ 
pends  on  close 
working  relation¬ 
ships  with 
clients,  thorough 
knowledge  of 
their  needs  and 
quick  access  to 
information  and 
expertise.  Ketchum  needed  a  knowl¬ 
edge  management  system  that  would 
leverage  staff  expertise,  personalize  in¬ 


formation  and  increase  collaboration. 

McKeon’s  team  replaced  a  first-gen¬ 
eration,  one-size-fits-all  intranet  with 
an  intranet/extranet  knowledge  man¬ 
agement  portal  that  customizes  infor¬ 
mation  based  on  user  needs.  The  por¬ 
tal  gives  all  Ketchum  professionals  and 
some  clients  access  to  information 
about  the  firm’s  staff  and  resources 
based  on  their  profiles,  and  it’s  cus¬ 
tomized  for  foreign-language  clients.  It 
also  features  eRooms,  virtual  work¬ 
spaces  where  clients  and  staff  can  col¬ 
laborate  online.  The  system  includes  a 
knowledge  base  of  information  from 
7,000  documents  and  a  catalog  of  staff 
expertise  and  client  engagements.  Em¬ 
ployees  are  encouraged  to  contribute  to 
the  knowledge  base,  and  performance 
reviews  are  tied  to  their  contributions. 

The  system  uses  corporate  portal 
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Position:  Chief  e-business  officer 
Ketchum,  a  wholly 
owned  subsidiary  of  New  York- 
based  Omnicom  Group  Inc. 

Atlanta 

Building  a  customized 
knowledge  management/collabora¬ 
tion  portal  for  staff  and  clients 

Ketchum  has  identified 
about  S10  million  in  new  business 
in  2001  that  is  at  least  partially  at¬ 
tributable  to  the  S5  million  project, 
life’s  lessons:  McKeon  coaches 
youth  softball  and  basketball. 
“Coaching  10-year-old  girls  is  much 
harder  than  running  a  business  or¬ 
ganization,  and  I’ve  learned  lots  of 
tips  and  tricks  that  have  helped  me 
in  my  business  career.” 


software  from  Plumtree  Software  Inc. 
in  San  Francisco,  collaboration  soft¬ 
ware  from  eRoom  Technology  Inc.  in 
Cambridge,  Mass.,  and  a  customized 
SQL  Server  database. 

The  system  “summarizes  in  10  min¬ 
utes  what  would  have  taken  a  couple  of 
weeks  of  phone  calls  and  research,” 
McKeon  says.  Less  than  a  year  after 
implementation,  staff  and  clients  were 
sharing  more  than  400  eRooms. 

The  project  began  in  January  2000, 
and  the  first  phase  was  completed  on 
time  and  within  budget  in  November 
2000.  An  upgrade  was  completed  in 
September  2001.  Monthly  metrics  track 
30  parameters,  including  page  views, 
feature  use,  contributions  and  eRoom 
use.  According  to  surveys,  staff  reaction 
to  the  system  is  95%  positive.  I 

—  Kathleen  Melymuka 
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When  cio  tom  murphy  came  to 
Royal  Caribbean  Cruises  Ltd.  in 
April  1999,  the  company’s  IT  work¬ 
force  was  as  diverse  as  they  come. 
Employees  hailed  from  more  than 
40  countries,  and  nearly  half  of  them  were  minorities 
or  women. 

But  IT  management  was  foundering.  “I  want  to  be 
honest  with  you,”  President  and  Chief  Operating  Of¬ 
ficer  Jack  Williams  told  Murphy.  “IT  is  screwed  up.” 

“It  was  a  very  traditional  IT  organization:  command 
and  control.  Everything  was  locked  down;  everything 
was  about  not  spending  money,”  Murphy  recalls.  “The 
gentleman  who  was  here  before  me  was  a  great  guy, 
but  very  timid,  and  the  CFO  basically  ran  the  place. 

“It  was  a  traditional  70s  data  processing  shop,” 
Murphy  says.  Cost-cutting  was  the  mantra.  Voice 
mail  was  new,  and  the  cruise  operator  was  only  dab¬ 
bling  with  e-mail.  There  was  no  IT  strategy  for  the 
future  and  no  respect  from  the  business  side. 

Adam  Goldstein,  senior  vice  president  of  total 
guest  satisfaction,  was  “vitriolic  in  his  disdain  for  all 
things  IT,”  Murphy  recalls,  and  he  wasn’t  alone.  “To  a 
person,  the  business  had  absolutely  lost  confidence” 
in  the  company’s  IT  department,  he  says. 

“No  matter  what  we  did,  it  was  never  right,”  recalls 
IT  Director  Percy  Lopez. 

Internally,  the  IT  group  was  made  up  of  factions, 
and  morale  was  terrible.  Word  around  the  depart¬ 
ment  was  that  two  opposing  “mafias”  —  Cuban  and 
African-American  —  controlled  the  data  center  and 
the  networking  group.  “Each  department  In  IT  did  its 
thing  and  didn’t  want  any  involvement  with  the  oth¬ 
ers,”  says  IT  manager  Dennis  Wright. 

“It  was  an  emotionless,  beaten-down  group,”  says 
Murphy,  who  had  come  from  well-oiled,  homogene¬ 
ous  IT  machines  at  Marriott  International  Inc.  and 
Omni  Hotels. 


BUSINESSCAREERS 


AT  A  GLANCE 


Royal  Caribbean 
Cruises  Ltd. 

LOCATION  Miami 
EMPLOYEES  27,000 
IT  EMPLOYEES  400* 

NET  INCOME  $324  million 

GROSS  REVENUE  $3.13  billion 
FLEET  23  cruise  ships;  47,400  berths 
Tor  four  quarters  ended  Sept.  30. 2001 

Note:  Royal  Caribbean  is  currently  in  negotiations  tor  a  merger  with  P&O  Princess 
Cruises  PLC,  a  London-based  cruise  line  with  gross  revenue  of  $2.45  billion. 


Almost  three  years  later,  everything  has  changed. 
Silos  and  resentments  have  disappeared,  and  the  IT 
group  has  become  phenomenally  successful.  Murphy 
personally  sold  the  board  of  directors  on  a  $180  mil¬ 
lion  effort  called  Project  Leapfrog  aimed  at  pulling 
Royal  Caribbean  into  the  21st  century. 

Since  then,  the  firm’s  IT  group  has  been  overhaul¬ 
ing  the  entire  IT  infrastructure.  This  effort  includes  a 
PeopleSoft  enterprise  resource  planning  implemen¬ 
tation,  a  revamped  public  Web  site  and  additional 
automation  to  facilitate  shipboard  and  shore  excur¬ 
sion  activities. 

These  days,  the  IT  department  is  respected  by  the 
business  and  proud.  “I  never  doubted  that  he  would 
transform  the  organization,”  Williams  says.  “But 
[Murphy]  did  it  quicker  than  I  thought  he  would.” 

Murphy,  39,  insists  that  there’s  no  magic  formula 
for  getting  a  diverse  group  to  pull  together.  “All  I  do 
is  try  to  create  the  atmosphere  and  the  environment 
that  allow  people  to  be  successful,”  he  says.  “It  has 
zero  to  do  with  where  they  came  from  or  what  color 
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their  skin  is.  You  just  remove  the  barriers  and  watch 
people  blossom.” 

When  pressed  on  the  point,  he  acknowledges  that 
there’s  one  more  thing  that  contributes  to  harmony 
in  a  heterogeneous  workplace.  “Integrity  establishes 
a  foundation  for  everything  that  you  do,”  he  says.  “If 
you  don’t  have  that,  you  have  nothing.” 

The  folks  at  Royal  Caribbean  watch  this  play  out  at 
work  every  day.  Here’s  their  account  of  how  Murphy 
manages  diversity: 

Communication.  “He  communicates  all  the  time, 
everything  to  everybody,  and  that  prevents  silos,” 
says  Leigh  Baker,  manager  of  shipboard  applications 
delivery.  “Silos  still  arise  around  projects  or  prod¬ 
ucts,  but  as  long  as  he’s  communicating  the  same 
message  and  the  same  goals  to  everyone  evenly,  then 
no  one  can  use  information  as  a  weapon.” 

“You  see  him  almost  every  day  at  the  cafeteria,  just 
chatting,”  says  IT  Director  Julie  Ponder.  “He  makes 
himself  accessible.” 

“He  interacts  with  everybody  at  the  same  level,” 
says  systems  analyst  Mike  KorbinL  “It  gives  me  a 
warm  feeling  that  he’s  taking  the  time  to  get  to  know 
me.  And  the  way  Tom  interacts  with  employees,  he 
sets  an  example.  And  it  gets  picked  up.” 

Silo-busting.  “Before  Tom,  there  was  more  ‘us  vs. 
them’  in  IT  —  ‘Everything  for  my  group,’  ”  Baker  re¬ 
calls.  She  notes,  for  example,  that  shipboard  and  on¬ 
shore  IT  people  didn’t  mix.  “But  now  we’re  forced  to 
work  in  cross-teams  to  bring  out  a  product,  and  the 
result  is  to  break  down  the  silos,”  she  says. 

Motivation.  “He  knows  at  least  80%  of  the  people  in 
the  department,  and  he  adapts  based  on  the  person,” 
Lopez  says.  “He  can  relate  to  what  motivates  them, 
rally  people  around  him  and  get  the  staff  to  believe  in 
what  we’re  trying  to  accomplish.” 

“He’s  such  a  positive  person,  and  he  instills  that,” 
says  IT  manager  Illeana  Gonzalez.  “You  see  him 
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TOM  MURPHY  (center),  CIO  at  Royal  Caribbean, 
says  that  motivating  a  diverse  group  of  employ¬ 
ees  “has  zero  to  do  with  where  they  came  from 
or  what  color  their  skin  is.  You  just  remove  the 
barriers  and  watch  people  blossom.” 


with  this  positive  energy,  and  that  goes  out  to  the 
environment.” 

Trust.  “We  don’t  have  to  check  back  every  10  min¬ 
utes,”  says  Baker.  “It  used  to  be  ‘Don’t  breathe  with¬ 
out  getting  permission.’  Now,  it’s  ‘You  know  the  para¬ 
meters;  do  what  you  think  is  best.’  ” 

With  authority  comes  responsibility.  “You’re  held  ac¬ 
countable  for  your  decisions,”  Wright  says.  “You’re 
going  to  be  helped  through  the  bad  ones  and  recog¬ 
nized  for  the  good  ones.” 

Murphy  strikes  the  right  balance  between  nurtur¬ 
ing  his  people’s  independence  and  growth  and  sup¬ 
porting  them.  “I  never  get  the  sense  he’s  looking  over 
my  shoulder,”  says  Ponder,  “but  I  do  have  the  sense 
that  if  I  look  behind  me,  he’ll  be  there,  championing 
my  cause.  It’s  very  empowering.” 

Metrics  and  time.  Murphy  has  established  very  spe¬ 
cific  performance  measures  to  let  his  managers  know 
exactly  what’s  expected  of  them.  He’s  also  central¬ 
ized  administrative  responsibilities  to  give  managers 
more  time  for  their  people. 

“We  used  to  spend  a  lot  of  time  with  vendors  and 
[make]  arrangements  for  training  and  travel,”  says 
Gonzalez.  “All  that  was  removed  and  given  to  other 
areas  so  that  we  could  focus  more  on  the  people.” 

Respect.  “The  change  has  been  profound,”  says 
Goldstein,  no  longer  vitriolic.  “I  give  Tom  tremen¬ 
dous  credit  for  turning  around  the  organization  and 
making  it  extremely  service-  and  customer-oriented. 
Instead  of  being  seen  as  an  obstacle,  it’s  seen  as  an 
assist  to  business.” 

This  new  respect  makes  the  IT  team  proud  of  it¬ 
self.  “We  have  a  great  working  relationship  with  the 
business  now,”  Lopez  says.  “They  respect  us,  they 
look  to  us,  and  that  raises  morale  on  the  staff.” 

Murphy  fosters  IT  pride  with  team-building  activi¬ 
ties.  IT  staffers  paint  and  do  landscaping  at  the 
Broward  County  Children’s  Society  Home,  clean  up 
local  creeks  and  help  build  a  house  each  quarter  with 
Habitat  for  Humanity. 

Fun.  “He’s  a  funny  guy,  and  his  sense  of  humor  adds 
to  his  ability  to  bring  diverse  people  together,”  says 
Ponder.  “He’s  always  trying  to  get  us  to  ease  up  and 
relax.” 

“He’s  just  himself,”  says  Lopez,  “and  that  lets  peo¬ 
ple  be  more  themselves  and  have  some  fun  while  get¬ 
ting  the  work  done.” 

Leadership.  “He’s  not  just  a  leader;  he’s  a  role  mod¬ 
el,”  says  Ponder. 

And  he  has  modeled  the  concept  that  everyone 
leads  and  everyone  works.  “If  there’s  work  that  needs 
to  be  done  —  even  at  a  lower  level  —  he  rolls  up  his 
sleeves,”  says  Gonzalez.  “He’ll  get  in  there  and  help.” 

For  instance,  Bernard  Gay,  vice  president  of  IT, 
says  he  once  found  Murphy  moving  equipment  with 
a  dockside  crew  to  speed  up  the  processing  of  cruise 
ship  passengers.  “Tom  is  not  afraid  to  help,”  he  says, 
“and  so  I  have  to  get  down  and  dirty  to  deliver,  too. 
There  are  no  excuses  here.” 

“Tom’s  not  a  good  IT  leader;  Tom’s  a  great  leader,” 
says  company  President  Williams.  “People  really  love 
this  guy.  Someday  he  will  be  the  president  of  a  com¬ 
pany,  and  it  will  be  a  great  company  to  work  for.”  I 

To  find  out  how  Tom  Murphy  rallied  his  IT  troops  after  a 
devastating  layoff  announcement  following  the  Sept.  11 
attacks,  visit  the  Computerworld  Web  site: 

vvww.compulerwor(d.conn/q?27349 


server  decision  that  will  finally  update  your  data  center.  The  problem  is,  it's  hard  enough  predicting 

what  will  happen  next  quarter,  let  alone  next  year.  So  how  can  you  be 
confident  that  the  infrastructure  choices  you  make  today  are  choices  you 
can  live  with  tomorrow? 

One  option  now  has  to  include  the  new  HP  server  rp8400— 
a  rack-optimized  breakthrough  designed  specifically  to  help  you  manage 
the  enormous  infrastructure  demands  generated  by  today's  constantly 
evolving  business  environment. 

It's  small  enough  to  fit  two  to  a  rack  yet  provides  unprecedented 
power  and  flexibility  in  a  mid-range  server.  In  fact,  we've  made  room  for  up 
to  16  processors,  setting  new  standards  in  the  category  for  both  performance 
density  and  scalability.  The  kind  of  power  you  need  to  more  easily  manage 
and  control  workload  allocation. 

Best-in-class  dynamic  partitioning  essentially  divides  the  server 
into  sections,  allowing  each  one  to  function  independently.  So  even  if  one 
application  goes  down,  the  other  sections  of  the  server  continue  their  jobs 
unaffected.  Which  makes  it  possible  to  move  resources  around  without 
having  to  shut  down  your  entire  system,  sidestepping  costly  downtime. 

And  with  the  convenience  of  HP  Utility  Pricing,  processing  power 
and  other  services  can  be  made  available  on  tap,  like  electricity.  So  you 
can  easily  and  securely  scale  online  without  having  to  invest  in  expensive 
hardware  or  support. 

HP  infrastructure  solutions— servers,  software,  storage,  services  and 
beyond— are  engineered  for  the  real  world  of  business.  Because  the  last  time 
we  checked,  that's  where  we  all  work.  Call  1.800.HPASKME,  ext.  246.  Or  visit 
hp.com/go/infrastructure. 

Infrastructure:  it  starts  with  you. 
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Managing  Einsteins 
And  Leaderless  Teams 

New  tomes  on  how  to  motivate  and  lead  whiz  kids,  guide  a 
‘conductorless’  IT  team  and  manage  projects. 


Leadership  Ensemble:  Lessons  in  Collabora¬ 
tive  Management  From  the  World’s  Only 
Conductorless  Orchestra,  by  Harvey 
Seifter  and  Peter  Economy  with  J. 
Richard  Hackman  (Times  Books,  225 
pages,  $25).  On  the  surface,  the  Or¬ 
pheus  Chamber  Orchestra  in  New 
York  appears  to  be  leaderless.  There  is 

no  conductor 
keeping  tempo 
with  a  baton  to 
signal  crescen¬ 
dos  from  the 
strings  or  de¬ 
crescendos 
from  the  brass. 
Yet  the  orches¬ 
tra  is  far  from 
leaderless,  as 
lackman 
^learned  from 
studying  how 
each  member 
takes  responsi¬ 
bility  for  ensuring  that  musical  pas¬ 
sages  are  cohesive  and  that  no  single 
section  drowns  out  the  other. 

There’s  a  certain  kind  of  democracy 
demonstrated  here  from  which  IT 
managers  and  technicians  alike  can 
draw  lessons.  Just  as  members  of  a 
project  team  can,  Orpheus  musicians 
recognize  that  there  are  differences 
among  players  in  their  experiences, 
musical  perspectives  and  abilities.  In 
Orpheus,  a  player’s  input  in  a  musical 
decision  isn’t  based  on  age,  gender, 
position  or  how  loudly  he 
speaks.  It’s  determined 
by  what  he  has  to  offer  to 
the  music. 

Seifter,  the  executive 
director  of  Orpheus,  and 
Economy,  the  author  of 
Managing  for  Dummies, 
do  a  deft  job  of  drawing 
analogies  to  other  compa¬ 
nies,  such  as  New  York- 
based  J.P.  Morgan  Chase 
&  Co.,  which  grants  em¬ 
ployees  wide-ranging 
autonomy  to  pick  and 


choose  from  the  company’s 
many  products  and  how 
they’re  presented  and  sold 
to  clients.  There  are  plenty 
of  practical  tips  on  how  to 
foster  “horizontal  team¬ 
work”  and  deal  with  issues 
such  as  aggressive  employ¬ 
ees  who  “hijack”  the  team 
process. 

—  Thomas  Hoffman 
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The  Project  Manager’s  Partner: 

A  Step-by-Step  Guide  to  Project 
Management  (2nd  edition),  by 

Michael  Greer  (Amacom  Books,  192 
pages,  $24.95).  The  recession  has  put 
its  share  of  pressure  on  IT  organiza¬ 
tions,  especially  in  the  form  of  requir¬ 
ing  more  disciplined  project  manage¬ 
ment.  This,  Greer’s  third  book  on  the 
subject,  is  especially  focused  on  rookie 
project  managers. 

The  book  covers  project  manage¬ 
ment  from  soup  to  nuts  and  is  dotted 
with  several  easy-to-understand  forms 
and  tables  that  can  guide  you  through 
a  project.  It  also  offers  questions  for 
readers  to  answer  in  order  to  deter¬ 
mine  whether  a  project  has  passed 
certain  checkpoints. 

Don’t  skip  the  introduction:  Reading 
it  can  help  you  pick  out  the  parts  of  the 
book  you  may  feel  you  need  to  read, 
given  your  project  management  expe¬ 
rience  —  or  lack  of  it.  Also,  check  out 
Appendix  E,  which  outlines  six  guide¬ 
lines  that  can  help  you 
decide  whether  to  kill 
a  project.  After  all,  if  a 
project  merits  a  death 
sentence,  there’s  no 
sense  in  wasting  your 
company’s  money  today. 

—  Rick  Saia 
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Business  Is  a  Contact  Sport, 

by  Tom  Richardson  and 
igusto  Vidaurreta  with 
om  Gorman  (Macmillan 
Publishing  USA,  256 
pages,  $24.95).  As  young¬ 


sters,  we  were  always 
told  by  our  parents  to 
play  nice  with  other 
kids. 

In  business,  it  still 
turns  out  to  be  good 
advice. 

To  be  successful, 
you  need  to  get  along 
;with  customers,  sup¬ 
pliers,  vendors,  em¬ 
ployees  and  competi¬ 
tors,  be  aware  of  their 
needs  and  serve  them 
fairly  to  maintain  those 
relationships. 

That’s  the  premise  of  this  book,  a 
how-to  guide  to  improving  your  busi¬ 
ness  communications  with  others 
through  effective  relation¬ 
ship  asset  manage¬ 
ment. 

The  problem  is,  it 
may  not  take  a  256- 
page  book  to  remind 
you  of  such  basic 
ideas.  The  authors 
write  as  though  they’re 
the  first  to  realize  that 
kind  words  and  deal¬ 
ings  do  much  to  help 
keep  business  rela¬ 
tionships  sound.  Even 
worse,  the  ideas  are 
presented  using  deadly, 
tired  football  cliches, 
from  a  “playbook”  to 
“thinking  like  a  player” 
and  offering  summaries 
as  “postgame  wrap- 
ups.” 

—  Todd  R.  Weiss 


Managing  Einsteins:  Lead¬ 
ing  High-Tech  Workers  in 
the  Digital  Age,  by  John  M. 
Ivancevich  and  Thomas 
N.  Duening  (McGraw-Hill 
Professional,  251  pages, 
$24.95).  Many  people 
regard  Albert  Einstein 
as  the  greatest  scientific 


mind  of  the  20th  century.  In  addition 
to  his  intellectual  superiority,  Einstein 
was  recognized  as  an  outspoken  critic 
of  bureaucracies.  Much  like  their  pre¬ 
decessor,  today’s  Einsteins  are  highly 
intelligent,  possess  revolutionary  ideas 
and  abhor  authority  exerted  over  them 
by  bureaucratic  managers. 

The  authors,  who  are  professors 
of  management  and  entrepreneurship, 
respectively,  at  the  University  of  Hous¬ 
ton,  do  a  credible  job  of  offering  sug¬ 
gestions  on  how  to  profile,  recruit, 
motivate,  reward,  lead  and  even  disci¬ 
pline  Einsteins. 

Though  Ivancevich  and  Duening 
draw  on  a  fair  amount  of  clinical  re¬ 
search  and  insights  from  experts  such 
as  The  Wall  Street  Journal’s  Sue  Shel- 
lenbarger,  some  readers  might  be  put 
off  by  some  of  the  sweeping  general¬ 
izations  the  authors  use  to  classify  the 
makeup  of  an  Einstein:  “Einsteins  love 
novelty . . .  Einsteins  are  puzzle  solvers 
. . .  Einsteins  become  bored  with  rou¬ 
tine.”  Who  doesn’t? 

Still,  there’s  a  lot  of  practical  advice 
based  on  different  management  meth¬ 
odologies,  such  as  balanced  scorecards 
that  should  help  IT  managers  who  are 
struggling  to  manage  and  lead  the  lat¬ 
est  crop  of  whiz  kids. 

—  Thomas  Hoffman 
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Too  much  data,  not  enough  base?  Store  Smarter 
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Active  Archive  Solutions.'  The  intelligent  way  to  optimize  database  performance. 

It’s  crowded.  It’s  slow.  It’s  your  database.  Paying  for  more  hardware  isn’t  the  answer;  smarter  data  management  is. 
Presenting  Princeton  Softech’s  Active  Archive  Solutions'.”  Active  archiving  removes  infrequently  used  data,  yet  keeps 
that  data  “active”  for  easy  access.  Freeing  up  room  in  your  database  and  improving  performance.  So  if  it’s  space  you 
want,  Store  Smarter.  Call  800.457.7060  or  visit  www.storesmarter.com. 

©  2002  Princeton  Softech  Inc.  All  rights  reserved.  pri/lCGtO/1 
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KATHLEEN  MELYMUKA/DIVERSITY 

The  Glass  Ceiling; 
Barrier  or  Challenge? 


I 


’VE  ALWAYS  BEEN  STRUCK  BY  how  neatly  many  IT  women  seem  to  fit 
into  one  of  two  categories  that  I  call  “Woe  Is  Me”  and  “Says  Who?” 

When  women  in  the  first  group  bump  against  perceived  gender  barri¬ 
ers  —  the  condescending  boss,  exclusion  from  the  boys’  club  or  the  fact 


that  no  woman  has  ever  led  a 
big  project  —  they  whine. 
Those  in  the  second  group 
perceive  those  barriers  as 
challenges  and  overcome 
them. 

This  isn’t  to  condone  gen¬ 
der  bias  in  IT  or  to  recom¬ 
mend  that  we  ignore  it.  But  it 
has  always  been  fascinating 
to  me  the  way  some  women 
seem  to  fixate  on  these  barri¬ 
ers,  while  others  focus  on  the 
goals  beyond  them. 

I  was  recently  reminded  of 
this  dichotomy  by  a  new  study 
from  Catalyst,  a  New  York- 
based  nonprofit  research  firm 
dedicated  to  advancing 
women  in  business. 

The  report,  “Careers  in 
High  Tech:  Wired  for  Suc¬ 
cess,”  was  based  on  compre¬ 
hensive  interviews  with  19 
women  and  11  men  considered 
to  be  part  of  the  current  and 
next  generations  of  IT  leaders 
at  10  high-tech  companies,  in¬ 
cluding  AOL  Time  Warner, 
Hewlett-Packard,  Oracle,  Nor¬ 
tel  Networks  and  Yahoo. 


Here’s  what  these  IT  leaders 
look  like:  The  majority  are  40 
to  44  years  old  (seven  are  un¬ 
der  35).  Twenty-seven  have 
bachelor’s  degrees,  and  14 
have  graduate  degrees.  Eight 
are  minorities,  but  none  is 
black  or  Hispanic.  Eighteen 
have  children. 

Most  report  directly  to  the 
CEO  or  the  level  immediately 
below.  They  have  titles  like 
group  product  director,  vice 
president  of  software  develop¬ 
ment,  group  manager  for  opti¬ 
cal  Ethernet,  senior  technical 
director,  vice  president  of 
global  services,  and  vice  presi¬ 
dent  of  strategy  and  corporate 
operations.  These  are  people 
who  are  making  things  happen 
in  U.S.  technology. 

Catalyst  had  hoped  to  shed 
some  light  on  common  career 
paths  of  successful  women  in 
IT.  Instead,  it  found  that  the 
women  themselves  discour¬ 
aged  that  kind  of  approach. 
Most  warned  against  a  pre¬ 
conceived  set  of  steps,  saying 
that  the  IT  industry  is  chang¬ 


ing  too  quickly  for  any  pre¬ 
planned  strategy  to  work.  In 
fact,  the  study  busted  the 
myth  that  the  most  successful 
people  plan  their  careers.  It 
turns  out  that  some  plan,  but 
most  don’t. 

The  study  also  found  that  a 
technical  degree  isn’t  a  pre¬ 
requisite  to  success  in  IT.  Few¬ 
er  than  half  of  the  IT  leaders 
who  participated  in  the  study 
have  math,  engineering  or 
computer  science  degrees.  So 
the  fact  that  young  women 
tend  to  shy  away  from  techni¬ 
cal  studies  —  long  used  to  ex¬ 
plain  their  absence  from  IT’s 
executive  ranks  —  may  not  be 
such  an  important  factor,  ac¬ 
cording  to  the  Catalyst  report. 

“There  is  no  necessary  or 
preferred  starting  point  for  ca¬ 
reers  in  high  tech,”  the  study 
reports.  “Several  went  direct 
to  the  goal,  others  followed  a 
circuitous  route,  [and]  still 
others  began  their  careers 
through  discovery  and  experi¬ 
ment.” 

Though  they  couldn’t  come 


up  with  a  road  map,  male  and 
female  IT  leaders  agreed 
about  how  to  power  yourself 
down  whatever  road  you  take. 
While  IT  men  often  gain  these 
types  of  insights  from  men¬ 
tors,  women  —  who  often  lack 
mentors  —  may  not.  They 
suggested  the  following: 

■  Dig  deep  into  your  chosen 
area  of  expertise 
in  the  first  five 
years  of  your  ca¬ 
reer. 

■  Build  a  track 
record  in  a  given 
functional  area 
and  establish  your 
credibility. 

■  Learn  to  man¬ 
age  a  small  group. 

■  Increase  the 
scope  of  your 
people  manage¬ 
ment  skills,  the 
size  of  your  team 
and  the  complexity  of  the  task 
for  which  you  are  responsible. 

■  Consciously  explore  other 
functions. 

■  Gravitate  toward  the  visi¬ 
ble,  difficult,  strategic  tasks. 

■  Deliver,  deliver,  deliver. 
Performance  and  results  are 
paramount. 

Participants  also  talked 
about  the  importance  of  flexi¬ 
bility  and  social  networks. 
They  said  IT  is  an  open  and 
fluid  environment,  so  you 
need  the  flexibility  to  jump  in 
when  you  see  opportunities. 
Keeping  in  touch  with  past 
employers  and  colleagues  is 
critical,  they  said,  because 
you  can  never  tell  where  that 
next  opportunity  is  going  to 


come  from. 

Many  of  the  respondents 
said  that  finding  a  mentor  is 
the  key  to  discovering  how  the 
system  works.  With  the  bene¬ 
fit  of  20/20  hindsight,  the 
women  said  they  would  have 
done  some  things  differently. 

“I  would  have  learned  how 
to  work  the  system  sooner,” 
said  one.  “I  didn’t 
understand  the  im¬ 
portance  and  pow¬ 
er  of  politics,”  said 
another.  “I  could 
have  been  far  more 
effective  in  using 
networks.  I  could 
have  better  under¬ 
stood  how  to  use 
or  get  resources.” 

But  among  all 
these  interesting 
insights,  the  one  I 
was  most  struck  by 
was  how  women 
who  are  IT  leaders  reacted  to 
the  glass  ceiling:  They  either 
turned  what  some  would  per¬ 
ceive  as  disadvantages  to  their 
advantage,  or  they  simply  re¬ 
fused  to  accept  the  barrier. 

“For  much  of  my  early  ca¬ 
reer,  I  was  the  only  woman,” 
said  one.  “But  it  was  always 
an  opportunity  for  me.  It  gave 
me  a  level  of  visibility  that  I 
wouldn’t  have  had.” 

Another  woman  said  that 
the  glass  ceiling  is  “like  an  in¬ 
vitation  with  me.  If  someone 
says,  ‘You  can’t  do  that,’  then  I 
go  [do  it]  ” 

These  are  the  attitudes  that 
make  an  IT  woman  into  an  IT 
leader,  and  these  women’s 
successes  prove  it.  I 


KATHLEEN  MELYMUKA  is  a 
Computerwor/d  feature 
writer.  Contact  her  at 
kathieen.melyrnuka® 
cojnpsstsrwKirirtxom. 


EXECUTIVE  TRACK 


CDW  Computer  Centers  Inc.,  a  cus¬ 
tomized-technology  provider,  has 
named  JONATHAN  J.  STEVENS  its 
CIO.  Stevens  will  be  responsible  for 
overseeing  the  Vernon  Hills,  III.- 
based  company's  IT  and  e-business 
strategies. 

Stevens  joined  CDW  as  vice  pres¬ 
ident  of  IT  in  July  last  year.  Before 
that,  he  served  as  regional  technol¬ 
ogy  director  at  Avanade  Inc.,  a 
Seattle-based  technology  integra¬ 
tion  company  formed  through  an  al¬ 
liance  between  Microsoft  Corp.  and 


Hamilton,  Bermuda-based  Accen¬ 
ture  Ltd. 


Irvine,  Calif.-based  Mazda  North 
American  Operations  recently 
announced  the  appointment  of 
JAMES  A.  DIMARZIO  as  its  CIO  and 
director  of  IT. 

DiMarzio  was  most  recently  se¬ 
nior  vice  president  and  CIO  at 
Agency  Holding  Co.,  where  he  was 
responsible  for  the  management  of 
information  systems  for  two  compa¬ 
nies.  Prior  to  that  position,  he  was 


general  manager  of  IT  at  Lanham, 
Md.-based  Land  Rover  North  Ameri¬ 
ca  Inc. 

Le  Meridien  Hotels  and  Resorts  in 
London  has  appointed  JAMES 
LAMB  its  CIO. 

Lamb  has  spent  the  past  12  years 
at  Dallas-based  Perot  Systems 
Corp.,  where  he  most  recently 
served  as  site  manager  of  the  com¬ 
pany’s  Reston  Development  Centre 
in  Reston,  Va. 

Lamb’s  previous  experience  at 
Perot  includes  the  management  of 
Westin  Hotels  &  Resorts’  worldwide 
technology  center  in  Salt  Lake  City. 

He  also  led  the  development  of  a 


new  central  reservation  system  for 
Tulsa,  Okla.-based  automobile 
rental  companies  Dollar  Rent  A  Car 
Systems  Inc.  and  Thrifty  Rent-a-Car 
System  Inc. 


FirstEnergy  Service  Co.,  a  sub¬ 
sidiary  of  FirstEnergy  Corp.  in 

Akron,  Ohio,  has 
promoted  KEVIN 
J.  KEOUGH  to  the 
position  of  senior 
vice  president 
responsible  for 
information  ser¬ 
vices,  perfor¬ 
mance  planning,  supply  chain  and 
telecommunications. 


Ali  Jamshidi,  FirstEnergy  Ser¬ 
vice’s  CIO,  will  report  to  Keough. 
Keough  previously  served  as  vice 
president  of  e-business  strategy, 
business  planning  and  unregulated 
ventures  at  the  energy  services 
provider. 

In  his  new  role,  Keough  will  re¬ 
port  to  CEO  H.  Peter  Burg.  Prior  to 
joining  FirstEnergy,  Keough  worked 
in  the  Cleveland  office  of  New  York- 
based  McKinsey  &  Co.,  a  manage¬ 
ment  consulting  firm. 

As  a  partner  in  McKinsey’s  elec¬ 
tric  power  and  natural  gas  practice, 
Keough  assisted  clients  with  strate¬ 
gic,  operational  and  organizational 
issues. 
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Dear  Career  Adviser: 

I’m  preparing  for  a  layoff  What  do  I  need  to  do  to  make 
sure  I  wrap  up  my  current  situation  before  I  move  on? 

—  LOOKING  FORWARD 


Dear  Forward: 

Here  are  some  tips  from  a 
variety  of  folks  who  have  al¬ 
ready  gone  down  this  road: 

Begin  by  documenting  the 
dollar  amounts  owed  to  you 
concerning  wages,  bonuses, 
commissions,  overtime  and 
vacation  pay.  Document  your 
retirement  monies,  making 
sure  that  any  payroll  deduc¬ 
tions  for  your  retirement  plan 
and  125C  cafeteria  benefits 
plan  have  transferred  over  to 
your  individual  retirement 
and  benefits  accounts  and  that 
they  aren’t  stuck  in  company 


coffers.  Also,  document  any 
stock  or  other  awards,  includ¬ 
ing  stock  vesting  schedules. 

Be  sure  you  know  and  have  di¬ 
rect  contact  with  your  compa¬ 
ny’s  401(k)  administrator,  have 
confirmed  that  your  health 
insurance  is  in  force  and  will 
continue  under  COBRA,  and 
have  access  to  any  outplace¬ 
ment  services  the  company  is 
providing. 

Get  all  of  this,  as  well  as  a 
written  payment  schedule  re¬ 
garding  when  to  expect  your 
checks,  in  writing,  and  have 
the  company  sign  off.  Then 
head  over  to  the  state  unem¬ 


ployment  office,  making  sure 
the  company  backs  your 
claim. 

Before  your 
final  goodbye,  col¬ 
lect  personal  infor¬ 
mation  from  col¬ 
leagues  so  you  can 
generate  the 
appropriate  refer¬ 
ences  and  trade 
leads,  and  check 
with  your  attorney 
regarding  whether 
the  noncompete 
agreement  that 
you  signed  when 
you  joined  the 


company  still  applies  if  you’re 
being  let  go. 

Dear  Career  Adviser: 

I’m  a  senior  programmer/ 
analyst  with  12  years’  experi¬ 
ence  in  IT,  all  in  mainframes.  I 
update  my  skills  every  year  in 
areas  including  Visual  Basic, 
MSAccess,  PowerBuilder, 
HTML,  Active  Server  Pages, 
Java  and  Oracle  PL/SQL.  But  I 
have  yet  to  find  a  position 

where  a  newbie  is 
accepted.  What 
skills  should  I  pur¬ 
sue,  and  how  do 
you  see  the  main¬ 
frame  IT  market  in 
the  next  five  years? 

—  MOSTLY 
MAINFRAME 

Dear  Mostly: 

Companies  have 
already  finished 
converting  from 
old  legacy  systems, 


and  Y2k  is  over.  And  e-com¬ 
merce  jobs  require  real-world 
experience  with  Enterprise 
JavaBeans.  Plus,  you  have  lots 
of  competition  both  from  ex¬ 
isting  mainframe  people  and 
people  who  have  real-world 
experience  with  newer  skills. 

“We  haven’t  had  a  main¬ 
frame  position  in  this  area  in  a 
long  time,”  says  Brett  Arnold, 
recruiter  at  GDI  Professional 
Services  in  Springfield,  N.J., 
who  expects  the  mainframe 
market  to  continue  to  wane. 

Realistically,  your  best 
chances  now  are  in  situations 
that  others  might  not  want. 

But  what  you’re  looking  for  is 
an  entry  point  that’s  your  op¬ 
portunity  for  an  upward  move. 

If  the  company  is  convert¬ 
ing  older  applications,  volun¬ 
teer  to  be  on  the  team.  Take 
courses  at  schools  that  guar¬ 
antee  internships  and  place¬ 
ment,  and  upgrade  your  skills, 
your  understanding  of 
business  and  possibly  even 
your  appearance.  I 


fran  QUirrEL  is  an  expert 
in  high-tech  careers  and 
recruitment.  Send 
questions  to  her  at 

www.computerworW.com/ 

career.adviser. 


WORKSTYLES 

Building  on  IT 
At^Bon  Malow 


Phil  Go,  CIO  at  Barton  Mal¬ 
ow  Co.,  talks  about  how  IT 
workers  fit  into  a  major  con¬ 
struction  firm. 

Being  in  the  construction  field, 
is  there  anything  unique  about 
your  actual  workplace?  “We 

just  moved  to  a  new  head¬ 
quarters  designed  by  our  in¬ 
ternal  architectural  firm  and 
built  by  Barton  Malow,  and 
it’s  a  showcase  of  what  we 
do  well.  When  you  walk  in 
the  building,  there’s  a  four- 
story  atrium,  and  it’s  so 
bright  —  especially  in  win¬ 
ter,  when  we’re  lucky  to  get  a 
couple  hours  of  sunshine. 

We  also  face  the  wetlands, 
with  a  long  boardwalk  that 
allows  you  to  enjoy  it. 

“The  building  was  also  de¬ 
signed  with  a  telephony  in¬ 


frastructure  that  uses  IP,  so 
when  people  leave  me  a 
voice  mail  or  send  a  fax,  I  get 
it  in  my  in-box.” 

What  are  the  most  critical  sys¬ 
tems  supported  or  developed  by 
your  department?  “One  is  our 
project  management  system. 
We  have  two  versions:  [ap¬ 
plication  service  provider]- 
driven  and  internally  hosted. 
The  second  is  our  job-cost¬ 
ing  system,  which  is  specific 
to  the  construction  industry. 
Whenever  either  of  those 
systems  has  a  small  hiccup, 
it’s  the  end  of  the  world.” 

What's  unique  about  your  IT 
department?  “Part  of  our  IT 
strategy  is  to  be  the  best 
there  is  in  the  construction 
industry,  which  tends  to  be  a 


bit  stodgy  when  it  comes  to 
technology.  We  just  finished 
putting  together  a  data  col¬ 
laboration  system  using  Pic¬ 
tureTel  technology.  Not  only 
can  you  see  each  other  when 
you  talk  on  the  phone,  but 
there’s  [also]  a  second  moni¬ 
tor  that’s  a  PC,  which  allows 
project  managers  and  mar¬ 
keting  people  to  collaborate 
on  things  like  proposal  de¬ 
velopment.  It’s  impressive  to 
clients.” 

How  would  you  describe  the 
pace  of  the  work?  “Extremely 


hectic  but  fun.  You  have  to 
do  whatever  it  takes  to  get 
the  job  done,  within  reason. 
One  thing  I  pride  myself  on, 
though,  is  I’m  very  sensitive 
toward  peoples’  personal 
lives.  For  me,  work  is  not  a 
place  —  it’s  an  activity.  You 
don’t  have  to  be  in  the  office 
to  get  your  work  done.” 

How  would  you  describe  the 
overall  culture  of  IT  at  your 
company?  “Somewhere  in 
between  casual  and  formal. 
A  few  years  ago,  Barton  Mal¬ 
ow  was  a  very  conservative 


firm,  and  people  dressed 
that  way.  When  I  started,  the 
IT  staff  asked  me  if  we  could 
go  to  business-casual  dress, 
and  we  were  able  to  do  that. 
But  we’re  not  too  formal  — 
the  leaders  here  are  very  ap¬ 
proachable,  and  we  foster  an 
environment  that  makes  it  a 
fun  place.  We  do  things  out¬ 
side  of  work  —  I  got  married 
a  year  and  a  half  ago,  and  I 
invited  the  entire  staff.” 

What  aspect  of  work  do  you 
look  forward  to  each  day?  “It’s 
very  rewarding  when  you  in¬ 
troduce  a  new  type  of  tech¬ 
nology  to  a  stodgy  company 
and  see  the  light  bulb  go  on, 
even  though  it  sometimes 
takes  three  or  four  tries  be¬ 
fore  they  say,  ‘Oh,  this  makes 
sense.’  ” 

What  aspect  do  you  dread  each 
day?  “The  corollary  —  that 
sometimes  it  takes  three  or 
four  times  for  them  to  get  it. 
That  can  be  frustrating.” 

-MaryBrande! 
thebrandels@hotmail.  com 


THIS  WEEK 


FIELD  REPORT:  NAS 

Network-attached  storage  (NAS)  is 
no  longer  an  ad  hoc,  departmental 
storage  add-on  —  it’s  becoming  a 
serious  top-down  enterprise  stor¬ 
age  resource.  We  take  a  multifac¬ 
eted  look  at  the  technology.  PAGE  40 

EMERGING  TECHNOLOGIES 

The  new  iSCSI  standard  paves  the 
way  for  IP-based  storage-area  net¬ 
works  (SAN),  but  don’t  boot  Fibre 
Channel  from  the  data  center  yet. 
Performance,  stability  and  interop¬ 
erability  are  still  evolving,  as  are  IP 
SAN  management  tools.  PAGE  44 

HANDSON 

Virtual  machines  that  can  concur¬ 
rently  host  multiple  operating  sys¬ 
tems  may  reduce  your  backup 
equipment  and  software  costs  by 
as  much  as  70%.  The  downside? 

A  slight  performance  hit.  PAGE  46 

QU 


Think  of  netiquette  as  rules  of 
good  behavior  adapted  for  elec¬ 
tronic  communications  via  e-mail, 
instant  messaging,  chat  rooms  and 
discussion  forums.  Find  out  more 
in  this  week’s  primer.  PAGE  48 


SECURITY  JOURNAL 

Mathias  Thurman’s  token-based 
access  system  may  protect  his 
company’s  e-commerce  site,  but 
the  network  engineers  oppose  it. 
Should  he  give  in  or  fight?  PAGE  50  1 


NICHOLAS  PETRELEY 


No  .Net  Advantage 


OW  THAT  Visual  Studio  .Net  has  launched  (on  Feb.  13  —  that 
wasn’t  a  Friday,  was  it?),  will  someone  remind  me  why  .Net  is 
destined  to  revolutionize  Web  services? 

Let’s  look  at  what  .Net  brings  to  the  table.  First,  .Net  relies 
on  standards  such  as  XML,  SOAP  and  UDDI  to  make  it  easy 


for  networked  objects  to  discover  other  networked 
objects  and  communicate  with  them. 

Second,  the  .Net  framework  is  programming-lan- 
guage-neutral.  The  .Net  environment  includes  the 
Common  Language  Runtime  and  the  Common  Inter¬ 
mediate  Language,  also  known  as  Microsoft  Interme¬ 
diate  Language,  abbreviated  MSIL  or  IL,  depending 
on  the  time  of  day.  This  acronym  soup  makes  it  possi¬ 
ble  to  combine  C#,  C++  or  Visual  Basic  .Net  (VB.Net) 
programs  as  if  they  were  all  written  in  the  same  lan¬ 
guage.  In  other  words,  the  moron  down  the  hall  who 
can’t  learn  anything  more  complicated  than  Basic  can 
write  VB.Net  programs  that  make  direct  references  to 
classes  and  methods  in  your  C++  program. 

Third,  Microsoft  says  it  gives  you  all  the  tools  you 
need  to  help  you  create  “platform-independent,  stan- 
dards-based,  language-neutral”  .Net  Web  services.  For 
example,  you  get  tight  integration  with  Microsoft’s 
Internet  Information  Server  (IIS)  and  built-in  access 
to  Hailstorm,  Passport  and  other  Microsoft  services. 

Fourth,  we  have  Visual  Studio  .Net  itself.  This  inte¬ 
grated  development  environment  supports  Micro¬ 
soft’s  C#,  C++  and  VB.Net  and  is  decked  out  with 
handy  tools  to  help  you  create  Windows-specific 
front  ends  for  .Net  applications. 

Let’s  see  if  we  can  figure  out  which  of  the  above 
features  is  most  likely  to  revolutionize  Web  services. 

Unless  you  were  born  yesterday,  I’m  sure  you  real¬ 
ize  that  Web  services  is  just  a  trendy  term  for  distrib¬ 
uted  computing.  Back  when  we  called  it  distributed 
computing,  the  Common  Object  Request 
Broker  Architecture  (CORBA)  seemed  to 
be  the  ideal  foundation.  You  can  use  any 
language  you  want  to  create  CORBA 
objects,  and  CORBA  is  truly  multiplat¬ 
form,  as  opposed  to  ActiveX,  which  is 
Windows-centric. 

Then  came  Java.  Java’s  platform  neutral¬ 
ity  made  it  highly  scalable,  but  Java’s  early 
answer  to  distributed  computing  was  a 
primitive  feature  called  Remote  Method 
Invocation.  This  feature  was  easy  to 
implement,  which  made  it  attractive 
despite  the  fact  that  it  was  a  Stone  Age 


tool  compared  with  CORBA.  It  almost  looked  as 
though  CORBA  would  make  a  comeback  when  Sun 
added  CORBA-based  Internet  InterOrb  Protocol  sup¬ 
port  to  Java.  But  the  protocol  proved  to  be  harder  to 
learn  and  implement  than  XML,  SOAP  and  UDDI.  As 
a  result,  Java  developers  seem  to  be  going  with  XML, 
SOAP  and  UDDI. 

Back  to  .Net.  What  is  it  about  .Net  that  will  revolu¬ 
tionize  distributed  computing?  Its  language  neutral¬ 
ity?  Integration  with  Microsoft  software  and  services? 
The  Visual  Studio  .Net  development  environment? 

Given  the  choices  programmers  have  been  making 
so  far,  it’s  difficult  to  imagine  that  they  will  switch 
from  a  platform-neutral,  single-language,  highly  scal¬ 
able  solution  like  Java  to  a  single-platform,  multilan¬ 
guage  solution  with  limited  scalability.  (Microsoft  is 
marketing  .Net  as  multiplatform,  but  anyone  who  be¬ 
lieves  that  should  revisit  the  issue  after  sobering  up.) 

Language  neutrality  is  cool,  but  as  nifty  as  it  might 
be  to  be  able  to  reference  a  C++  class  directly  from  a 
VB.Net  program,  the  more  languages  you  add  to  a 
project,  the  more  difficult  that  project  is  to  maintain. 
But  there’s  one  simple  reason  why  you  can  be  sure 
language  neutrality  won’t  revolutionize  Web  services: 
It  has  nothing  whatsoever  to  do  with  Web  services. 

What’s  left?  Considering  Microsoft’s  less-than- 
stellar  reputation  for  security,  I  don’t  think  develop¬ 
ers  are  going  to  flock  to  .Net  because  it’s  tightly  inte¬ 
grated  with  Microsoft  IIS  and  Microsoft  services 
such  as  Hailstorm  and  Passport.  So  it’s  safe  to  cross 
that  feature  off  the  list. 

And  no  matter  how  terrific  the  visual 
tools  may  be,  it’s  hard  to  believe  a  glorified 
text  editor  could  revolutionize  Web  ser¬ 
vices.  So  I  think  we  can  eliminate  Visual 
Studio  .Net  as  the  answer. 

That  leaves  the  fact  that  .Net  supports 
XML,  SOAP  and  UDDI.  Of  all  the  features 
of  .Net,  that  support  is  what  has  the  poten¬ 
tial  to  revolutionize  Web  services.  Problem 
is,  these  standards  existed  before  .Net,  and 
you  don’t  need  .Net  to  use  them. 

So  will  someone  remind  me  why  .Net  is 
destined  to  revolutionize  Web  services?  ► 


NICHOLAS  PETRELEY  is  a 

computer  consultant  and 
author  in  Hayward.  Calif. 
He  can  be  reached  at 

nicholas@petreley.com. 
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Overview 

Network- 

Attached 

Storage 

Network-attached  storage  (NAS)  is 
quietly  transitioning  from  an  ad  hoc, 
departmental  storage  add-on  to  a 
serious  top-down  enterprise  storage 
resource.  This  highly  reliable  file  server 
approach  has  always  been  relatively 
inexpensive  and  easy  to  configure  and 
manage.  But  now,  a  single  NAS  server 
accommodates  tens  of  terabytes  of 
data,  and  NAS  systems  sport  more  effi¬ 
cient  backup  technology  and  support 
applications  more  efficiently  over  to¬ 
day’s  faster  Gigabit  Ethernet  networks. 
What’s  missing?  Better  tools  to  manage 
across  distributed  NAS  resources. 

By  Robert  L. 

Mitchell 


Bigger  and  Bigger 

WHILE  STORAGE-AREA  networks 
(SAN)  have  been  getting  all  the 
■■■■■■■■■■■V  attention,  network-attached  stor¬ 
age  (NAS)  has  been  quietly  breaking  all  the  rules.  Es¬ 
sentially  a  plug-and-play  disk  storage  subsystem  with 
embedded  file-serving  software,  NAS  technology  was 
originally  seen  as  an  easy  way  to  add  a  few  hundred  gi¬ 
gabytes  of  storage  to  a  LAN.  Two  years  ago,  such  boxes 
might  have  scaled  to  0.5TB.  Today,  a  single 
NAS  system  may  support  as  much  as  30TB. 

Data  backup  was  supposed  to  be  a  big 
problem  for  large  NAS  devices  due  to  net¬ 
work  congestion.  But  thanks  to  adoption  of 
the  Network  Data  Management  Protocol 
standard  and  technologies  such  as  Sunny¬ 
vale,  Calif.-based  Network  Appliance  Inc.’s 
Snapshot  feature  (which  creates  a  copy,  or  “image,” 
of  the  file  system  and  associated  disk  block  map¬ 
pings),  that’s  changed.  Today,  you  can  run  NAS  back¬ 
ups  over  high-bandwidth  Gigabit  Ethernet  networks 
quite  efficiently. 

NAS  devices  have  traditionally  served  up  files  to 
end  users,  while  SANs  have  allowed  application 
servers  to  access  disk  storage  without  a  server  inter¬ 
mediary  and  send  it  in  efficient  block-data  format 
over  Fibre  Channel,  a  dedicated,  high-speed  serial 
interconnect.  But  NAS  is  now  well  established  for 
adding  capacity  to  e-mail  servers,  Web  server  farms 
and  SQL  and  Oracle  databases,  where  clusters  of  NAS 
devices  can  increase  availability  and  throughput. 

Data  center  applications  such  as  online  transaction 
processing  still  work  better  on  SANs,  which  offer 
high  scalability  and  faster  performance,  especially 
for  large  files  or  where  storage  traffic  is  heavy.  But 
even  “some  block-level  applications,  like  an  Oracle 
or  IBM  DB2  database,  are  adopting  a  file  system  to 
replace  the  block  storage  technique,”  says  Jon  Toigo, 
an  independent  storage  consultant  in  the  Tampa  Bay 
area.  “There  is  a  certain  convergence  going  on,  and 
NAS  is  well  positioned  to  take  advantage  of  it.” 

NAS  servers  are  relatively  easy  and  inexpensive  to 
install,  and  users  say  they’ve  been  highly  reliable. 
“NAS  is  great  because  you  can  distribute  it  all  over 
the  place,  and  you  can  manage  it  from  one  location,” 
Toigo  says. 

NAS  is  not  without  its  limitations,  however.  Most 
servers  use  a  Web  management  interface,  which 
works  fine  for  a  single  device.  But  as  the  systems 
reach  capacity,  administrators  must  add  new  NAS 
systems.  The  problem:  “You’ve  got  to  surf  the  [indi- 


NAS  takes  on 
new  roles  as 
its  capacity 
and  scalability 


vidual]  Web  pages  associated  with  each  NAS  box  to 
maintain  them.  That’s  a  hassle,”  says  Toigo. 

Then  there’s  storage  virtualization.  A  single  NAS 
server  allows  multiple  disks  to  appear  as  a  single  vir¬ 
tual  storage  volume  to  end  users  and  application 
servers.  And  administrators  can  add  hot-pluggable 
disk  drives  to  the  system  and  expand  the  virtual  vol¬ 
umes  on  the  fly,  without  disrupting  applications  us¬ 
ing  them.  But  these  volumes  typically  can’t  span  mul¬ 
tiple  NAS  servers,  let  alone  work  with  other  vendors’ 
NAS  devices,  and  that  limits  scalability.  A  few  start¬ 
ups  have  begun  offering  that  capability,  but 
the  technology  hasn’t  yet  trickled  up  to  the 
market  leaders. 

“NAS  is  a  great  out-of-the-box  solution, 
but  you  don’t  have  a  lot  of  options  in  config¬ 
uring  it,”  says  Mike  Carrato,  a  partner  in  Ac¬ 
centure  Ltd.’s  New  York  office.  That’s  one 
reason  organizations  aren’t  loading  any¬ 
where  near  30TB  on  a  single  NAS  device  today.  But 
users  are  looking  for  new  ways  to  use  this  relatively 
inexpensive,  high-capacity  storage,  and  vendors  are 
looking  for  new  ways  to  accommodate  them.  Ulti¬ 
mately,  analysts  say,  IP  SANs  will  offer  a  single,  virtu¬ 
alized  storage  pool  for  both  NAS  and  SAN  functions. 
Until  then,  users  will  have  to  make  do  with  SAN/NAS 
hybrids  like  IBM’s  NAS  300G,  which  places  a  NAS 
front  end  on  an  IBM  Shark  Fibre  Channel  SAN  to 
convert  client  file  requests  to  block  data  requests.  I 


NAS  by  Class 


COMPETITORS 


Enterprise-class  NAS:  For 
enterprise-class  network-attached 
storage,  EMC  Corp.’s  Clariion  and 
Network  Appliance  Inc.'s  NetApp  filer  servers  still  rule. 

The  devices  can  scale  to  nearly  30TB  and  offer  the  most 
advanced  management  tools  -  including  the  ability  to  work 
with  enterprise  network  management  tools  like  Computer 
Associates  International  Inc.’s  Unicenter  TNG  and  Hewlett- 
Packard  Co.’s  OpenView.  “EMC  has  the  leading  storage 
management  software  in  Control  Center.  They're  very  well 
placed  to  serve  whatever  you  need  to  do  -  if  you  can  afford 
them,”  says  Mark  Roberts,  principal  of  Dataphile  Consult¬ 
ing  in  Austin,  Texas.  These  vendors  also  offer  enterprise- 
class  support  programs  and  proven  reliability. 

Departmental  filers:  Filer  servers  from  vendors  such 
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Getting  Big  Files 
Into  a  Small  Box 


Who  they  are:  A  $2  billion  indepen¬ 
dent  oil  and  gas  exploration  and  pro¬ 
duction  company. 


Goal:  Allow  geologists  and  geophysicists  to  share  1.5TB 
of  seismic  data  files;  consolidate  back¬ 
up  of  seismic  data  and  an  Oracle  data¬ 
base;  improve  backup  performance; 
accommodate  the  purchase  of  large 
quantities  of  additional  seismic  data 
files  with  minimal  disruption. 


Forest  Oil  Corp. 

Headquarters:  Denver 
Web:  www.forestoif.com 
Phone:  (303)  812-1400 


migrate  to  Veritas  Software  Corp.'s  NetBackup  version 
supporting  the  Network  Data  Management  Protocol 
(NDMP);  migrate  Oracle  data  to  NAS;  deploy  everything 
on  Gigabit  Ethernet. 

Issues:  Performance  differences  were  a  key  differentia¬ 
tor  in  choosing  a  NAS  device,  says  Patrick  Murphy,  man¬ 
ager  of  IT.  “Typically,  seismic  data  comes  in  40  or  50MB 
files,”  he  says.  By  working  with  peer  organizations  and 
running  comparative  tests  using  his  applications,  Murphy 
found  that  performance  varied  by  as 
much  as  20%  for  his  application  mix. 


Challenges:  An  existing  5-year-old 
NAS  device  maxed  out  at  1TB  using  older  9GB  disk  drives. 
Growth  in  data  storage  needs  was  stretching  backup 
times.  The  amount  of  floor  space  available  to  accommo¬ 
date  more  boxes  was  limited. 

Strategy:  Replace  existing  NAS  unit  with  Auspex  Sys¬ 
tems  Inc.’s  NS  3000  NAS  device  with  2TB  of  capacity; 


Advice:  Compatibility  counts.  “You  have 
to  be  concerned  that  the  backup  soft¬ 
ware,  filer  head  and  backup  hardware 
will  work  together,"  Murphy  says. 


Payoff:  The  new  system  provides  more  storage  in  a 
smaller  footprint  and  allows  volumes  to  scale  to  10TB 
without  interruption.  Performance  improved  10%  to 
20%,  and  backup  times  were  cut  in  half.  “The  newer 
box  supports  NDMP,”  Murphy  says.  “It  dropped  our 
backup  time  by  more  than  50%. . . .  That’s  mostly 
attributable  to  NDMP.’’ 


as  Quantum  Corp.  and  Maxtor  Corp.  offer  an  easy  way  to 
add  inexpensive  storage  in  remote  offices,  departments  or 
small  to  midsize  businesses.  They're  good  for  adding  a 
quick  300GB  of  storage  on  a  departmental  LAN  but  are 
more  unwieldy  to  manage  as  the  number  of  NAS  servers 
grows.  If  you’re  using  NAS  devices  to  consolidate  Win¬ 
dows  servers,  look  for  systems  that  use  Microsoft  Corp.’s 
Common  Internet  File  Services  (which  supports  Active  Di¬ 
rectory)  rather  than  the  Unix-based  Network  File  System. 

The  innovators:  Start-ups  are  the  great  innovators  in 
NAS  technology.  For  example,  LeftHand  Networks  Inc.  in 
Boulder,  Colo.,  and  Tricord  Systems  Inc.  in  Plymouth. 
Minn.,  can  virtualize  and  centrally  monitor  storage  across 
multiple  NAS  servers,  creating  highly  scalable  storage 
systems  that  can  be  distributed  for  greater  fault  tolerance. 
And  Tek-Tools  Inc.  in  Dallas  is  working  on  XML-based 
agent  technology  that  will  allow  management  of  multiple 
vendors'  NAS  boxes  from  a  single  management  screen. 


NAS  Market  Leaders  by  Revenue 

Network  Appliance  and  EMC  captured  the  lion’s 
share  of  the  $1.8  billion  worth  of  NAS  appliances  sold  in 
2000,  although  Quantum  led  in  unit  shipments  due  to 
volume  sales  in  the  low  end  of  the  market. 


Storage  Appliances: 
Not  All  Plug  and  Play 

DON'T  TELL  DAN  ROSMAN  that 
NAS  devices  just  plug  and 
play.  His  first  clustered  Net- 
App  servers  from  Network  Appliance  Inc. 
wouldn’t  work  with  his  warehouse  application 
server,  until  he  discovered  that  the  HP-UX- 
based  system  needed  a  patch  to  rectify  compati¬ 
bility  problems  with  the  Network  File  System 
(NFS)  file-sharing  software  the  NAS  server  uses. 

After  that,  Rosman,  IT  director  at  Fairfield, 
Calif.-based  Jelly  Belly  Candy  Co.,  ran  into  trou¬ 
ble  configuring  storage  virtualization.  The  Net- 
App  server  presented  its  storage  as  a  network 
file  share,  but  the  Oracle  database  software  and 
warehouse  management  application  wanted  a 
drive  letter.  Rosman  mapped  the  drive  letter  to 
the  new  share  name,  but  “every  time  a  user 
would  log  off,  it  would  break  all  those  mappings 
and  the  system  would  stop 
working,”  he  says.  He  ended 
up  going  through  the  reg¬ 
istry  settings  for  the  Oracle 
software  and  the  application 
and  removing  all  references 
to  the  drive  letter.  (Network 
Appliance  says  it  now  lets 
the  NAS  appliance  appear 
as  a  drive  letter.) 

Rosman  then  set  up  NetApp’s  Snapshot 
feature,  which  takes  a  snapshot  image  of  the 
file  system  and  data  every  four  hours,  allow¬ 
ing  for  rapid  rollback  in  the  event  of  data  cor¬ 
ruption.  But  the  multiple  images  take  up  valu¬ 
able  disk  space.  Rosman  would  like  to  take 
snapshots  of  other  applications  in  the  same 
volume  only  once  a  day,  but  the  technology 
won’t  support  that. 

Recently,  Rosman  had  a  snapshot  problem 
that  resulted  from  administrator  error.  “In¬ 
stead  of  letting  the  system  do  it,  we  took  some 
manual  snapshots  and  left  those  in  the  pro¬ 
duction  volume,”  he  says.  Those  images  con¬ 
tinued  to  consume  more  disk  space  until  “we 
filled  up  one  of  the  filers  and  the  database 
stopped.”  Rosman  had  decided  to  pass  on  Net¬ 
work  Appliance’s  monitoring  software  in  favor 
of  a  plug-in  for  his  HP  OpenView  management 
software,  but  he  hadn’t  yet  implemented  it. 

Rosman  says  the  NetApp  file  servers  are 
“very  easy  to  manage.”  He  says  he  also  found 
support  and  performance  better  than  with 
server-attached  storage,  thanks  in  part  to  Net¬ 
App’s  1GB  cache.  But  appliance  or  not,  the  sys¬ 
tem  requires  careful  management  when  used 
for  mission-critical  applications.  I 


NAS  appliances 
seem  easy,  but 
keep  your  hands  on 
the  wheel  when 
using  them  for 
mission-critical 
application  servers. 


Quick 

Link© 


For  more  information,  including  a  Q&A  with 
consultant  Jon  Toigo,  a  collection  of  tips  for 
NAS  installation  and  management,  and  an 
extensive  resource  list,  visit  our  Web  site: 


www.computerworld.com/q?a1610 
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Application 
Integration  Forges 
Offshore  Link 

Refiner’s  project  cuts  training  time,  costs  and  billing  errors.  By  Michael  Meehan 


Perfecting 
The  Pipeline 

The  initial  implementation  of  an  EAI 
project  to  link  Tesoro’s  docking  facili¬ 
ties  to  its  back  end  involved  running 
SAP  ERP  applications  in  parallel. 

HTML  user 


screen 


t 

Object  translation 

”  I  ' 


Parallel  SAP  on  NT  server  farm 


NT  servers  running  SAP  for 
Tesoro’s  marine  services  unit 


Having  tasted  success 
with  a  limited  enterprise 
application  integration 
(EAI)  project,  Tesoro 
Petroleum  Corp.  was 
emboldened  to  tackle  linking  mission- 
critical  information  silos  that  had  never 
exchanged  data  before. 

A  year  ago,  Mark  Evans,  CIO  at  the 
San  Antonio-based  oil  refiner,  faced  a 
data  dilemma  in  Tesoro’s  marine  ser¬ 
vices  division.  The  process  of  getting 
diesel  fuel,  drill  lubricants  and  sup¬ 
plies  out  to  the  company’s  oil  rigs  in 
the  Gulf  of  Mexico  was  fraught  with 
errors.  Wrong  customer  numbers,  in¬ 
correct  product  numbers,  taxation 
mistakes  and  a  lack  of  proper  docu¬ 
mentation  made  it  nearly  impossible 
to  track  what  the  rigs  had  in  stock  or 
to  pay  Tesoro’s  suppliers  in  a  timely 
fashion. 

In  February  last  year,  Evans  started  a 
pilot  project  to  link  the  billing  systems 
for  Tesoro’s  offshore  operations  to  the 
corporate  enterprise  resource  planning 
(ERP)  system  from  SAP  AG.  Previous¬ 
ly  skeptical  about  the  ability  to  forge 
such  links,  Evans  has  since  been  con¬ 
verted  into  an  integration  evangelist. 

Evans  decided  he  needed  to  bolt 
an  HTML  face  onto  an  SAP  back  end 
so  his  wildcatters  could  worry  about 
drilling  for  oil  rather  than  learning 
the  nuances  of  how  to  fill  in  forms  on 
an  SAP  system.  Evans  chose  Dallas- 
based  integration  vendor  Fuego  Inc. 
and  set  out  to  reduce  what  would  be 
13  to  15  screens  of  work  in  an  SAP 
environment  to  three  Web-based 
screens. 

His  first  order  of  business  was  to 
create  a  separate  SAP  instance  dedicat¬ 
ed  to  handling  orders  for  the  offshore 


operations  to  run  alongside  the  marine 
services  division’s  existing  SAP  system. 

“We  wanted  to  make  sure  we 
weren’t  hammering  our  production 
and  development  environment,  so  we 
created  a  buffer,”  Evans  says. 

The  new  SAP  instance  required  five 
new  Windows  NT  servers.  In  addi¬ 
tion,  Evans’  team  had  to  coordinate 
LAN  and  directory  services  to  make 
sure  the  field  offices  were  sending 
information  to  the  proper  SAP  in¬ 
stance  before  the  informa¬ 
tion  was  imported  into  the 
marine  division’s  main  ERP 
system. 

After  six  weeks,  Evans 
had  a  parallel  SAP  environ¬ 
ment  and  an  HTML-based 
system  that  could  execute 
up  to  14  different  SAP 
transactions.  Fuego’s  pro¬ 
prietary  component  inte¬ 
gration  language  translated 
the  HTML  pages  into  SAP 
business  application  pro¬ 
gram  interfaces  (BAPI). 

Evans  found  that  the  error  rate  for 
orders  taken  at  Tesoro  docking  facili¬ 
ties  dropped  60%.  Training  for  the 
field  employees  also  took  only  one  day 
instead  of  what  Evans  says  could  have 
been  a  year  of  trial  and  error  with  the 
ERP  system. 

All  told,  the  project  cost  less  than 

$100,000. 

“Initially,  when  we  went  into  this, 
you  didn’t  know  if  you  were  going  to 
have  shelfware,  but  as  it  turns  out,  I 
particularly  liked  the  ease  of  use,” 
Evans  says.  “It  really  changed  our 
thinking.  Suddenly,  integration  wasn’t 
a  black  hole  that  we  wanted  to  stay 
away  from.  It  stopped  being  this  ma¬ 


jor  technical  problem. 

“It’s  been  a  real  cultural  change,” 
he  adds.  “Integration  now  is  really  part 
of  every  project  we  intend  to  do,  and 
it’s  all  based  on  the  fact  that  it’s  easier 
to  do.” 

Adding  Layers 

Although  Tesoro  sold  its  offshore 
drilling  facilities  after  that  project, 
Evans  is  now  in  the  process  of  integrat¬ 
ing  the  company’s  refinery  control  sys¬ 
tems  with  the  rest  of  its  IT  infrastruc¬ 
ture.  That  90-day  EAI  project  is  due  to 
be  completed  this  month. 

Evans  is  creating  an  XML-based 
integration  layer  between  Tesoro’s 
refinery  control  systems  and  its  SAP- 
based  business  IT  infrastructure. 
Rather  than  use  point-to-point  data 
translation,  Evans  says,  he  wants  to 
transform  pipeline,  tank-gauging  and 
treatment  data  in  XML  documents 
that  could  then  be  distributed  to 
Tesoro’s  accounting  and  business 
divisions. 

“There’s  all  sorts  of  safety  and  regu¬ 
latory  reasons  to  improve  the  flow  of 
this  data,”  Evans  says.  “Until  now,  we 
haven’t  been  able  to  fully  understand 
what  went  out  and  came  in  each  day  at 
the  refinery  level.  Reconciliation  has 
been  a  monthly  process.” 

Part  of  the  reason  there  hasn’t  been 
that  level  of  monitoring  is  that  refinery 
systems  are  largely  propri¬ 
etary,  focused  on  the  pecu¬ 
liarities  of  operating  safely 
in  a  heavily  regulated  indus¬ 
try.  Those  refinery  systems 
have  been  “firewalled  off” 
from  the  rest  of  Tesoro’s 
operations,  Evans  says. 

He  had  been  using  a  Win¬ 
dows  NT  server  farm  to  act 
as  a  data  historian  for  the 
refinery  operation,  but  it 
has  been  little  more  than  a 
repository.  It  hasn’t  been 
able  to  track  real-time  prod¬ 
uct  movement,  process  variables  or 
production  schedules. 

One  of  the  reasons  Evans  chose  an 
XML  data  format  was  that  he  wants  to 
eventually  be  able  to  push  data  to  busi¬ 
ness  partners. 

Evans  says  much  of  the  work  has 
centered  on  load-balancing  his  servers 
both  in  the  refinery  and  business  sys¬ 
tems  to  make  sure  they  don’t  crash 
when  they  begin  swapping  data.  Busi¬ 
ness  process  rules  for  error-handling 
have  also  been  a  focus. 

“You’ve  got  to  make  sure  the  right 
people  get  notified,”  Evans  says. 

And  all  this  because  he  learned  not 
to  fear  EAI.  I 


Tesoro’s 
EAI  Pilot 

Error  rate:  Dropped 
60%  for  orders  taken 
at  docking  facilities 

Training  time:  Re¬ 
duced  from  an  estimat¬ 
ed  one  year  to  one  day 

Project  cost:  Less 
than  $100,000 
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The  rebound  is  coming.  It  always  does.  And  while  it's  easy  to  focus  on 
the  “when”  of  the  rebound,  the  real  question  should  be  “what  then?” 
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iSCSI 

Adoption  of  the  iSCSI  protocol 
will  enable  IP-based  storage- 
area  networks  that  will  chal¬ 
lenge  Fibre  Channel  for  domi¬ 
nance. 

BY  ROBERT  L.  MITCHELL 

IF  A  VENDOR  CLAIMED  to 
offer  a  storage-area  net¬ 
work  (SAN)  with  the 
performance  of  Fibre 
Channel  (FC)  but  with¬ 
out  the  cost  and  complexity, 
jaded  FC  administrators  might 
be  a  hard  sell.  After  all,  FC  net¬ 
work  devices  have  been  noto¬ 
riously  incompatible,  expen¬ 
sive  and  complex  to  administer. 

But  IP  SANs  promise  to 
change  all  that  by  implement¬ 
ing  the  Internet  Small  Comput¬ 
er  Systems  Interface  (iSCSI) 
protocol,  which  enables  SANs 
to  operate  over  industry-stan¬ 
dard  TCP/IP  and  Ethernet. 

The  concept  of  storage  net¬ 
working  over  IP  isn’t  new: 
Network-attached  storage  ap¬ 
pliances  have  long  delivered 
file  services  over  IP  using  Net¬ 
work  File  System  or  other  file¬ 
sharing  protocols.  But  creating 
storage  networks  that  allow 
highly  efficient  block-level 
transfers  between  application 
servers  and  shared  storage 
pools  has  been  the  domain  of 
FC  networks  —  a  switched, 
high-speed  serial  interconnect 


requiring  specialized  cabling, 
host  bus  adapters  (HBA), 
switches  and  management 
software. 

IP  SAN  architecture,  an  ex¬ 
tension  of  existing  SCSI  and 
TCP/IP  Ethernet  standards, 
could  reduce  costs  by  creating 
a  unified  corporate  IP  network 
that’s  easier  to  design,  inte¬ 
grate  and  manage  than  a  tradi¬ 
tional  FC  SAN.  ISCSI  net¬ 
works  are  also  compatible 
with  IP-based  security  mecha¬ 
nisms  such  as  Kerberos,  pub¬ 
lic-key  encryption  and  IPsec. 

Setting  up  an  IP  SAN  isn’t 
simply  a  matter  of  plugging  in 
iSCSI-attached  storage,  how¬ 
ever.  While  an  IP  SAN  can  run 
on  standard  Gigabit  Ethernet 
switches,  the  overhead  in¬ 
volved  in  processing  of  TCP 
and  the  iSCSI  protocol  can 
quickly  overwhelm  the  CPU  in 
servers  with  significant  stor¬ 
age  network  traffic.  IT  man¬ 


agers  may  need  to  replace 
standard  Ethernet  adapters 
with  special  HBAs  called  TCP 
off-load  engines  (TOE). 

John  Flynn,  IT  director  at 
Minneapolis-based  NRG  Ener¬ 
gy  Inc.,  says  he  hopes  to  get  by 
without  TOEs.  “None  of  [our] 
applications  have  high-perfor¬ 
mance  I/O  requirements,”  he 
says. 

But  Rick  Halbardier,  project 
coordinator  for  Washau  Coun¬ 
ty,  Nev.,  will  need  TOEs  for 
the  IP-based  tape  backup  SAN 
he’s  testing.  “Backups  tend  to 
use  all  the  CPU  resources  avail¬ 
able  to  the  system,”  he  says. 

Halbardier  is  optimistic 
about  the  emerging  TOE  adapt¬ 
ers.  But,  he  says,  “I  don’t  know 
that  we  can  say  it’s  going  to  be 
reliable  until  we’ve  tested  it.” 

It  might  not  be  compatible, 
either.  Standards  committees 
are  hammering  out  iSCSI  draft 
standards  (the  final  version  is 


iSCSI  Outlook  vs.  Fibre  Channel 
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INFRASTRUCTURE 

PERFORMANCE 

BEST  FIT  TODAY 

iSCSI 

Can  use  existing 
Ethernet  switches, 
network  adapters 
and  copper 
cabling 

1G  bit/sec.; 
servers  may 
require  special¬ 
ized  TOE 
adapters 

Outside  the  data 
center  where  FC 
SAN  costs  can’t  be 
justified 

FIBRE 

CHANNEL 

Requires  special 
HBAs,  switches  and 
fiber  cabling 

1G  or  2G  bit/sec. 

mmgmmmm  m  m .  mm  m  m 

Critical  data  center 
applications  where 
proven  technology 
is  a  must 

expected  this  summer),  but 
vendors  are  rushing  products 
to  market.  There  are  no  stan¬ 
dards  for  TOE,  different  ven¬ 
dor  interpretations  of  the 
iSCSI  standard  could  lead  to 
interoperability  problems,  and 
no  certification  process  exists. 
And  vendors  have  little  credi¬ 
bility  in  the  user  community 
after  the  interoperability  de¬ 
bacle  with  early  FC  devices. 

Once  the  standard  is  stable, 
analysts  predict,  IP  SANs  will 
slowly  replace  FC,  but  users 
with  an  investment  in  FC  are 
unlikely  to  change  over  soon. 
“You  don’t  replace  existing 
technology  with  emerging 
technology,”  says  Dan  Tanner, 
an  analyst  at  Aberdeen  Group 
Inc.  in  Boston,  adding  that  FC 
now  supports  2G  bit/sec. 
speeds  while  Ethernet  still 
maxes  out  at  1G  bit/sec. 

Initially,  the  best  fit  for  iSCSI 
may  be  around  the  edges  of  the 
FC  SAN,  where  its  lower  cost 
makes  more  sense.  But  early 
adopters  might  do  well  to  emu¬ 
late  Flynn’s  pragmatic  ap¬ 
proach  to  IP  SANs.  By  choos¬ 
ing  FC  storage  arrays  with  an 
FC/iSCSI  switch,  he  can  move 
to  FC  if  things  don’t  work  out.  I 


«  r\r  for  a  user  case  study,  a 
V/Uldv  comparison  of  iSCSI 
T  with  other  storage 

1  Jll  protocols,  a  brief 

interview  with  Nishan  System’s  Tom  Clark 
and  links  to  IP  storage  vendors,  visit  our 
Web  site  at  www.computerworld. 
com/q?a162G 


The  Benefits 
Of  Storage 
Over  Ethernet 


Q&A 


Ahmad  Zamer,  product 
line  manager  at  Intel 
Corp.’s  LAN  access  divi¬ 
sion  in  Austin,  Texas,  is  chairman  of 
the  Storage  Networking  Industry  Assc 
ciation’s  iSCSI  subgroup.  He  recently 
talked  with  evaluations  editor  Robert  I 
Mitchell  about  the  iSCSI  protocol. 


What  is  iSCSI  good  for?  The  main 


concept  of  iSCSI  is  to  allow  people  to 
build  storage-area  networks  using  Eth¬ 
ernet.  If  you  already  have  a  large  net¬ 
work  that  is  built  around  Ethernet,  it  is 
natural  to  connect  the  storage  to  that 
network  rather  than  having  to  learn 
new  ways  to  deal  with  storage.  Smaller 
and  medium-size  organizations  cannot 
afford  the  cost  of  Fibre  Channel  SANs. 
We  expect  iSCSI  to  be  cheaper  and 
easier  to  implement. 

What  are  the  immediate  bene¬ 
fits?  The  main  benefit  is  the  long  op¬ 
erating  distances  that  iSCSI  will  bring 
to  the  table.  Right  now,  you  have  to 


jump  through  a  lot  of  hoops  to  put  your 
storage  tar  away  for  disaster  recovery. 
IP  storage  makes  it  doable. 

When  will  the  standard  be  final? 

We  will  create  the  document  [this 
month],  and  it  goes  into  a  three-month 
review  period.  Then  we  go  into  the 
July  or  August  meeting  and  expect  that 
we  will  get  out  with  a  standard. 

Does  “standard”  really  mean  in¬ 
teroperable?  We  want  to  make  sure 
products  interoperate.  We  do  not  want 
to  see  the  consumers  get  stung  again 
by  another  untested  set  of  products 


that  the  vendors  say  are  OK  but  when 
plugged  in  don’t  work  together. 

How  will  costs  compare  to  FC? 

Lower  training,  lower  cost  of  owner¬ 
ship.  The  management  costs  will  be 
cheaper  in  terms  of  management  toois 
and  human  resources.  As  the  product 
matures,  you’ll  be  able  to  manage  the 
network  from  one  window. 

Who  should  skip  iSCSI?  Where 
you  do  not  need  [iSCSI’s]  operating 
distances  and  you  have  already  invest¬ 
ed  in  FC.  there  is  no  point  at  this  mo¬ 
ment  to  switch  to  iSCSI. 


A  few  iSCSI  products  are  either 
available  or  will  hit  the  market 
this  year. 

Target  Devices 

COMPANY:  IBM 

PRODUCT:  TotalStorage  IP  Storage 

200i,  an  iSCSI-based  storage  array 
that  can  support  up  to  3.5TB  of  data 

COMPANY:  3ware  Inc. 

Mountain  View,  Calif. 

PRODUCT:  Palisade  IP  storage 

array;  supports  up  to  640GB 

Storage  Switches 
And  Gateways 

COMPANY:  Cisco  Systems  Inc. 
PRODUCT:  SN  5420  Storage 
Router;  allows  direct  attachment  of  FC 
storage  devices  onto  an  IP  SAN 
PRODUCT:  IPS  2000  IP  storage 
switch;  connects  legacy  SCSI  storage 
devices  to  a  Gigabit  Ethernet  IP  SAN 

COMPANY:  Nishan  Systems  Inc. 

San  Jose 

PRODUCT:  IPS  3000  Storage 

Switch;  connects  iSCSI  and  FC 
networks 

COMPANY:  Pirus  Networks 

Acton,  Mass. 

PRODUCT:  Powerful  “carrier  class” 
multiprotocol  storage  switches  that 
handle  a  large  number  of 
connections 

iSCSI  HBAs _ 

Vendors  plan  to  ship  HBAs  with  TOEs 
and  onboard  SCSI  off-load  capabilities 
next  quarter. 

COMPANY:  Intel  Corp. 

PRODUCT:  Intends  to  ship  an  iSCSI 
HBA  at  half  the  cost  of  a  typical  FC 
HBA 

COMPANY:  Adaptec  Inc. 

Milpitas,  Calif. 

PRODUCT:  Uses  a  full  off-load  appli¬ 
cation-specific  integrated  circuit  on  its 
ASA-7211  iSCSI  Adapter,  which  it 
claims  improves  server  performance 
by  30%  to  50% 

COMPANY:  Alacritech  Inc. 

San  Jose 

PRODUCT:  Implements  part  of  the 
TCP  function  in  a  device  driver,  which 
allows  its  1000x1  adapter  to  handle 
both  iSCSI  and  normal  TCP  traffic 

-  Robed  L.  Mitchell 
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Virtual  Recovery 
Via  Virtual  Servlrb 


A  new  approach  to  disaster  recovery  involves  running  multiple 
operating  systems  in  a  single  backup  server.  By  Howard  Millman 


IN  an  ideal  WORLD,  disaster  re¬ 
covery  strategies  would  include 
backup  equipment  ranging  from 
a  single  server  to  an  entire  dark 
data  center.  In  the  real  world,  you 
can’t  afford  to  set  up  an  entire  extra 
data  center  that  you  hope  you’ll  never 
use.  At  the  same  time,  you  can’t  ignore 
the  need  for  real-time  business  conti¬ 
nuity  protection.  Virtual  machines  that 
can  concurrently  host  multiple  operat¬ 
ing  systems  may  reduce  your  backup 
equipment  and  software  costs  by  as 
much  as  70%.  The  downside?  Accept¬ 
ing  a  slight  performance  hit. 

Virtual-machine-based  server  con¬ 
solidation  is  a  technology  that’s  almost 
too  good  to  be  true.  Its  promised  sav¬ 
ings  result  from  combining  multiple 
servers  and  operating  systems  into  one 
RAM-crammed,  multiprocessor  box. 

The  chief  player  in  this  market  is 
Palo  Alto,  Calif. -based  VMware  Inc.  Its 
virtual  machine  server  software  can 
run  up  to  20  operating  systems  concur¬ 
rently  —  including  all  versions  of  Win¬ 
dows,  from  3.1  to  XP,  and  many  flavors 
of  Unix  —  in  one  physical  box.  VM¬ 
ware  offers  two  virtual  server  prod¬ 
ucts:  GSX  Server  runs  on  Intel-based 
machines  using  Unix,  Linux  or  Win¬ 
dows,  while  ESX  Server  contains  its 
own  base  operating  system. 

Similar  in  purpose  (but  not  struc¬ 
ture)  to  an  emulator,  virtual  machines 
create  independent,  isolated  comput¬ 
ing  environments  that  include  a  BIOS, 
I/O  systems  (serial,  parallel  and  Uni¬ 
versal  Serial  Bus  ports)  and  support 
for  SCSI  devices,  as  well  as  full  net¬ 
work  connectivity.  For  mixed  environ¬ 
ments,  the  software  supports  file  shar¬ 
ing  between  Linux  and  Windows  sys¬ 
tems  using  Samba. 

While  the  servers  are  virtual,  the 
benefits  are  real:  hardware  savings  as  a 
result  of  server  consolidation  and  re¬ 
duced  maintenance  expenses.  A  reduc¬ 
tion  in  your  need  for  physical  space 
may  not  yield  a  direct  savings,  but  it 


can  be  an  added  advantage.  Because 
virtual  machines  switch  between  oper¬ 
ating  systems  in  seconds  and  don’t  re¬ 
quire  a  reboot,  downtime  in  case  of 
failure  is  measured  in  seconds.  Also,  if 
one  system  crashes,  it  won’t  affect  any 
other  virtual  machines  or  the  host 
server’s  operating  system. 

“As  part  of  a  disaster  recovery  plan, 
running  independent  multiple  operat¬ 
ing  environments  enables  you  to  guar¬ 
antee  immediate  data  availability  and 
integrity,”  says  Jeremy  Smith,  president 
of  Global  Continuity  PLC,  a  business 
continuity  service  provider  and  part¬ 
ner  of  VMware  in  England. 

Liverpool,  England-based  beverage 
firm  Halewood  International  Ltd. 
worked  with  Global  Continuity  to  in¬ 
stall  two  virtual  servers  using  the 
Global  Continuity/VMware  technolo¬ 


GSX  Server 

$2,500  per  server;  unlimited  connections 


PURPOSE 


For  use  in  single-,  two-  and  four-CPU  machines, 
each  running  four  to  16  virtual  machines 


□  m  >  •  Windows  2QMAtvSvi- MS  US 
•f  n  «  ►  *  AoacfteWeb  Servor 

tj  □  on  t>  /hom8A<mY*aiB/RedHaAt)62,cta 


gy.  Halewood’s  objective  was  to  reduce 
the  cost  of  backup  equipment  and  sup¬ 
port  and  to  locate  backup  equipment 
nearby  for  easy  service  and  testing. 

Before  using  Global  Continuity’s 
NeverFail  backup  software,  Hale- 
wood’s  IT  manager,  Alec  Stewart, 
backed  up  all  of  the  company’s  data  to 
a  digital  audiotape  recorder  and  copied 
databases  to  another  server  each  night. 
That  made  Halewood’s  data  secure,  but 
the  company  lacked  real-time  rollover 
capability  in  case  of  failure.  Stewart 
says  he  also  worried  about  data  integ¬ 
rity  and  the  system’s  ability  to  grow. 

“The  cost  [for  traditional  disaster  re¬ 
covery  options]  was  prohibitive,”  says 
Stewart.  “We  also  looked  at  buying  a 
warehouse  and  [outsourcing]  the  oper¬ 
ation.  However,  the  building  acquisi¬ 
tion  cost  and  regular  visits  to  test  the 


ESX  Server 


COST 


Starts  at  $3,800  for  a  two-CPU  server  and  rises 
to  $10,000  for  an  eight-CPU  server;  unlimited 
connections 


PURPOSE 


For  use  in  four-  and  eight-CPU  machines,  each 
running  eight  to  20  virtual  machines 
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equipment  didn’t  make  sense.” 

Stewart  rolled  out  two  dual-proces¬ 
sor  GSX  Servers  running  under  Win¬ 
dows  NT,  plus  the  NeverFail  software. 
The  virtual  servers  mirror  the  data 
stored  in  Halewood’s  primary  line-of- 
business  servers. 

Preliminary  savings  look  promising. 
“Overall,  they  are  seeing  a  70%  reduc¬ 
tion  in  costs  using  the  GSX  Server,” 
says  Smith.  Halewood’s  one-time  out¬ 
lay  was  about  $17,000  for  server  hard¬ 
ware  and  $20,000  for  the  NeverFail 
software,  VMware’s  GSX  Server  and 
on-site  consulting  services.  Hale¬ 
wood’s  systems  now  support  more 
than  100  staff  users,  600  corporate 
clients  and  thousands  of  private  clients. 

Although  Halewood  and  most  other 
customers  use  the  system  to  provide 
zero-downtime  rollover  protection, 
Smith  says  the  virtual  machines  can 
also  run  line-of-business  applications 
and  deliver  the  same  cost-reduction 
and  space-saving  advantages  they  do 
for  disaster  recovery.  What’s  more,  a 
single-server  configuration  can  host 
multiple  copies  of  an  operating  system, 
each  running  an  isolated  application, 
Web  server  or  database.  This  allows  IT 
managers  to  use  a  virtual  machine  as  a 
test  bed  to  provide  an  extra  margin  of 
safety  when  testing  new  applications 
or  sandboxing  a  potential  virus. 

No  Free  Lunch 

Because  these  are  machines  in  a  ma¬ 
chine,  you  may  experience  a  10%  to 
15%  decrease  in  performance  for  GSX 
Server  and  about  a  5%  decrease  in  per¬ 
formance  for  ESX  Server.  Adding  RAM 
and  multiple  processors  will  minimize 
the  hit.  Allocating  RAM  to  each  of  the 
running  operating  systems,  as  well  as 
other  configuration  options,  is  handled 
through  a  management  console. 

I  tested  VMware’s  Workstation  3.0,  a 
desktop  virtual  PC  running  under 
Windows  XP.  I  needed  at  least  512MB 
to  run  two  virtual  operating  systems, 
Mandrake  Linux  and  Windows  98. 

Each  additional  concurrent  operating 
system  requires  another  512MB. 

While  virtual  machines  offer  a  long 
list  of  benefits,  disaster  recovery  is  all 
about  getting  your  data  back  intact  and 
your  systems  restored  —  fast.  As  part 
of  an  insurance  policy  you  hope  to 
never  use,  VMware’s  GSX  and  ESX 
Server  do  provide  extra  protection. 
That  was  the  ultimate  motivation  for 
Stewart,  who  says,  “We  have  never  ex¬ 
perienced  a  data  loss  in  the  past  —  and 
we  want  to  keep  it  that  way.”  I 


Millman  is  a  writer  and  consultant  in 
Croton,  N.Y. 
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TECHN0L06YQUICKSTUDY 

HOT  TRENDS  &  TECHNOLOGIES  IN  BRIEF 


Netiqultte 


DEFINITION 

Netiquette  is  all  about  etiquette  on 
the  Internet.  Think  of  it  as  rules 
of  good  behavior  adapted  for 
electronic  communications  via 
e-mail,  instant  messaging,  chat 
rooms  and  discussion  forums. 


p\e«s 

s? ELL  ch  ec/r!! 
V-  Reply  A\  \  ”? 


BY  BRIAN  SULLIVAN 

U.S.  DEPARTMENT 
of  Commerce  re¬ 
port  says  that 
more  than  half 
the  nation  is  now 
online.  Thus,  more  people 
than  ever  before  are  meeting 
one  another  for  the  first  time, 
chatting  on  a  regular  basis  and 
swapping  ideas  and  opinions 
with  perfect  strangers  via  the 
Internet. 

A  new  set  of  do’s  and  don’ts 
—  rules  of  polite  behavior  — 
is  springing  up  to  augment  the 
etiquette  that  rules  our  off-line 
behavior.  This  new  netiquette 
has  quickly  become  a  univer¬ 
sally  understood  behavioral 
standard  that  transcends  cul¬ 
tures,  businesses  and  geo¬ 
graphical  boundaries. 

Here’s  a  brief  look  at  some 
of  the  rules  of  netiquette  that 
are  becoming  the  norm: 

1.  Don’t  lie  about  who  you 

are.  In  Computerworld.com’ s 
forums,  one  man  recently  took 
a  very  strong  stance  defending 
Microsoft.  Other  forum  mem¬ 
bers  accused  him  of  working 
for  a  company  that  partners 
with  Microsoft  but  not  dis¬ 
closing  that  fact.  Members 
said  they  recognized  the  man’s 
arguments  and  writing  style 
from  other  forums.  After  the 
brouhaha,  the  offender  apolo¬ 
gized  for  causing  trouble  and 
vanished  off  the  boards. 

Vanessa  DiMauro,  Comput- 
erworld.com’ s  director  of  com¬ 
munities,  points  out  another 
problem  with  a  fake  identity. 
People  form  relationships  in 
discussion  groups,  and  you 
don’t  want  to  end  up  in  a  posi¬ 
tion  where  you  have  to  reveal 
that  you’re  not  the  24-year-old 
roller-skating  blonde  you  said 
you  were. 

More  important,  DiMauro 
says,  such  a  misrepresentation 
of  identity  is  simply  a  viola¬ 
tion  of  trust,  and  that’s  never 
good  form. 


2.  Know  when  to  shut  up. 

These  days,  it’s  hard  to  deter¬ 
mine  when  a  conversation  is 
over,  according  to  Joseph 
Cothrel,  vice  president  of  re¬ 
search  at  Participate  Systems 
Inc.  in  Chicago.  He  says  we’ve 
all  been  in  instant  messaging 
or  e-mail  conversations  that 
just  keep  going  on  and  on.  Do 
you  really  have  to  say  “You’re 
welcome”  to  the  guy  who  just 
said  “Thank  you”?  Sometimes 
it  feels  like  everyone  is  trying 
to  out-polite  one  another. 

3.  Know  when  it’s  OK  to 

talk.  When  you  first  show  up 
at  a  discussion  forum,  it’s  not 
always  a  good  idea  to  plunge 
right  in,  Cothrel  says.  Take  a 


look  around,  and  read  the  fo¬ 
rum  guidelines  and  other 
posts  to  see  how  the  commu¬ 
nity  fits  together.  Jumping  in 
with  a  harsh  opinion  won’t 
create  a  good  first  impression, 
and  the  Web,  like  life,  is  all 
about  making  a  good  first  im¬ 
pression. 

4.  Check  your  grammar. 

More  and  more  often  in  dis¬ 
cussion  groups,  members  are 
chastising  people  who  use  bad 
grammar  or  misspell  words. 
Cothrel  says  that  nothing  kills 
an  argument  for  him  like  see¬ 
ing  a  simple  word  misspelled 
consistently.  He  says  you  have 
to  wonder:  If  people  can’t 
spell,  do  they  really  know 


what  they’re  talking  about? 

5.  Don’t  ask  about  e-mail 
you  just  sent.  Don’t  button¬ 
hole  someone  in  the  hall  or 
telephone  him  five  minutes  af¬ 
ter  you  send  a  lengthy  e-mail 
and  ask  him  what  he  thinks 
about  it.  Give  him  a  chance  to 
read  it,  digest  it  and  reply  via 
e-mail.  According  to  Cothrel, 
more  and  more  people  consid¬ 
er  discussions  about  e-mail 
messages  a  waste  of  time. 

6.  Follow  threads  you  start. 

When  you  start  a  thread  on  a 
discussion  forum,  especially  if 
you  asked  a  question,  follow 
that  thread.  And  if  you  solve 
the  problem  you  asked  about, 
tell  the  board.  Likewise, 
Cothrel  points  out,  if  the  ad¬ 
vice  you  received  from  the 
other  members  led  you  to  a 
solution,  be  sure  to  tell  them. 

7.  Don’t  use  instant  messag¬ 
ing  for  long  messages.  Betsy 

Waldinger,  vice  president  at 
Chicago-based  OptionsXpress 
Inc.,  spends  a  lot  of  her  day 
working  on  an  online  cus¬ 
tomer-service  chat  system 
that  operates  a  lot  like  instant 
messaging.  She  says  it’s  impor¬ 
tant  to  send  short  messages 
and  to  break  up  long  ones  over 
many  screens.  If  you  don’t,  she 
says,  you  force  the  people  on 
the  other  end  to  wade  through 
an  overly  long  message  —  and 
you  keep  them  waiting  for  an 
answer  while  you  type. 

8.  Send  a  message  before 

yOU  drop  in.  At  companies 
where  instant  messaging  is 
part  of  the  culture,  Cothrel 
says,  you  should  always  send 
someone  a  note  before  drop¬ 
ping  into  his  office.  This  gives 
the  other  person  a  chance  to 
let  you  know  if  he’s  in  the 
middle  of  something.  It  also 
saves  you  the  trouble  of  walk¬ 
ing  over  to  his  office  only  to 
find  that  he’s  gone  home. 
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9.  Log  off  instant  messaging 
when  you’re  not  using  it.  i 

often  leave  my  messaging  pro¬ 
gram  on  when  I’m  not  around 
and  come  back  to  find  mes¬ 
sages  asking  questions  and 
other  messages  in  which  the 
senders  ask  why  I’m  ignoring 
them.  One  of  these  days, 
someone  will  send  me  an  em¬ 
barrassing  message  and  there 
it  will  be  on  my  computer 
screen,  flashing  for  all  to  see. 
And  it  will  be  my  own  fault. 


10.  Never  send  an  e-mail 
you  wouldn’t  read  in  public. 

The  night  before  his  wedding, 
a  Massachusetts  state  official 
sent  a  colleague  an  e-mail  say¬ 
ing  he  wasn’t  sure  he  wanted 
to  get  married.  Unfortunately, 
he  hit  Send  All,  and  all  state 
employees  with  e-mail  ac¬ 
counts  received  the  note. 
Boston  Herald  gossip  reporters 
evidently  received  numerous 
forwarded  copies,  and  they 
printed  the  message  in  the 
newspaper.  Word  is,  the  guy’s 
fiancee  married  him  anyway. 


Tl.  Think  twice  before 
forwarding  e-mail.  The  jury 

remains  out  as  to  whether  for¬ 
warding  messages  is  accept¬ 
able.  Obviously,  it’s  sometimes 
necessary  for  business 
reasons,  but  people  do  it  far 
more  often  than  they  need  to. 
Philip  Zimmermann,  creator 
of  Pretty  Good  Privacy  en¬ 
cryption,  has  said  he’s  not  a 
fan  of  forwarding  e-mails. 

How  often  would  you  even 
think  of  taking  a  handwritten 
letter  you’ve  received,  making 
a  photocopy,  putting  it  in  an 
envelope  and  sending  it  off  to 
someone  else?  Zimmermann 
says  the  same  thought  and  re¬ 
spect  should  go  into  forward¬ 
ing  e-mail.  I 


For  a  complete  list  of 
Technology  Quick- 
Studies,  visit  Com- 
puterworld.com  at 


www.computerworld.com/q?q3000 


■  Are  there  technologies  or  issues  you  would  like  to  learn  about  in  QuickStudy?  Please  send  your  ideas  to  quickstudy@computerworld.com. 
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Authentication  Rollout 
Turns  Into  Control  Issue 

When  a  proposed  token-based  access  system  draws 
resistance,  Mathias  must  choose  among  lesser  options 


BY  MATHIAS  THURMAN 

ne-time  passwords,  to¬ 
kens,  smart  cards  and 
public-key  infrastructure 
are  all  excellent  meth¬ 
ods  for  creating  access- 
control  architectures.  My  company  is  in 
the  process  of  implementing  a  token- 
based  infrastructure  for  access  to  our 
critical  servers  and  network  devices 
and  for  remote  virtual  private  network 
(VPN)  access  into  specific 
areas  of  our  corporate  net¬ 
work.  The  tokens  are  time- 
based,  one-time  password¬ 
generating  products  and 
are  good  at  providing  the 
two-factor  authentication 
necessary  for  allowing  ac¬ 
cess  to  critical  devices. 

Implementing  security 
usually  carries  a  cost.  I’m 
referring  not  to  the  acqui¬ 
sition  cost,  but  to  the  plan¬ 
ning  required.  Take  some¬ 
thing  as  simple  as  chang¬ 
ing  the  Windows  NT  do¬ 
main  password  policy.  The 
technical  procedures  are 
straightforward:  It’s  often 
a  simple  matter  of  in¬ 
stalling  a  product  such  as  San  Ramon, 
Calif.-based  Master  Design  &  Develop¬ 
ment  Inc.’s  Password  Bouncer  or 
Passfilt.dll,  which  comes  with  Micro¬ 
soft  Corp.’s  Windows  NT  and  2000. 

Hidden  Costs 

However,  the  consequence  of  that 
policy  may  be  an  increase  in  help  desk 
support  calls  from  thousands  of  users 
who  can’t  remember  even  simple  pass¬ 
words.  Changing  policy  or  introducing 
security  technology  often  requires  a 
considerable  amount  of  planning.  And 
the  projects  inevitably  raise  concerns 
about  usability  vs.  productivity,  conve¬ 
nience  vs.  security  and  risk  vs.  reward. 
The  security  department  has  to  make 
decisions  that  may  be  perceived  as  im¬ 
peding  the  company’s  business  and  op¬ 
erations.  That’s  what  happened  in  my 


organization,  and  I’m  still  struggling  to 
find  a  solution. 

We  selected  tokens  that  are  time- 
based  and  that  can  be  used  only  once. 
The  system  generates  a  number  that’s 
algorithmically  matched  to  a  central 
server.  A  user  must  enter  a  valid  pass- 
code,  which  is  his  personal  identifica¬ 
tion  number  (PIN)  plus  the  number 
displayed  on  the  token.  Then  he  must 
wait  for  the  system  to  generate  a  new 
token  number  before  he 
can  authenticate  again. 

By  default,  the  tokens 
ship  with  the  ability  to  gen¬ 
erate  a  new  number  every 
60  seconds.  This  interval  is 
acceptable  for  accessing  a 
single  device  or  perhaps  for 
remote  VPN  user  authenti¬ 
cation.  But  in  large  enter¬ 
prises,  users  often  need  ac¬ 
cess  to  multiple  devices 
quickly. 

For  example,  to  properly 
troubleshoot  a  network 
problem,  a  user  needs 
access  to  a  Domain  Name 
System  server,  three 
routers,  two  switches  and 
one  firewall  —  a  total  of 
seven  devices.  If  I  have  configured  to¬ 
ken-based  access  for  all  those  devices, 
the  user  will  have  to  wait  at  least  seven 
minutes  before  having  simultaneous 
access  to  them. 

Another  drawback  is  the  use  of  enter¬ 
prise  management  tools,  which  auto¬ 
matically  log  into  devices  for  configu¬ 
ration,  maintenance  or  monitoring.  The 
management  tools  can’t  use  the  tokens 
for  authentication.  It  takes  human  in¬ 
tervention  to  read  the  number  generat¬ 
ed  by  the  token  and  input  the  correct 
passcode.  And  therein  lies  the  rub  for 
our  internal  network  team. 

In  some  high-volume  e-commerce 
businesses,  a  network  outage  can  cost  a 
company  more  than  $10,000  per  minute 
in  lost  revenue.  Most  of  our  business  is 
conducted  over  the  Internet,  and  I  sus¬ 
pect  our  cost  of  lost  business  per 


minute  is  almost  $5,000.  But  there’s 
enough  redundancy,  fail-over  and  load 
balancing  in  our  environment  to  ensure 
the  required  four  nines  (99.99%)  of 
availability. 

The  chance  of  a  catastrophic  outage 
is  fairly  low,  but  I  can’t  convince  net¬ 
work  engineers  of  this.  In  their  minds, 
anything  that  impedes  access  to  their 
network  gear  is  an  obstacle  that  could 
result  in  unnecessary  downtime. 

The  network  team  feels  the  token 
time-out  issue  is  unacceptable  and  is 
against  its  use  in  the  infrastructure.  I 
could  probably  convince  the  vice  presi¬ 
dent  of  engineering  or  the  CIO  of  the 
importance  of  the  tokens  and  force 
their  use.  However,  doing  so  would  cre¬ 
ate  friction  between  the  security  and 
network  groups.  So  we  have  to  come  up 
with  some  other  options. 

Options  and  Trade-Offs 

Our  first  idea  was  to  enable  a  static 
password  instead  of  a  passcode.  The 
product  we’re  using,  Bedford,  Mass.- 
based  RSA  Security  Inc.’s  SecurlD  ACE 
Server,  allows  the  issuance  of  tempo¬ 
rary  passwords  when  a  user  forgets  or 
breaks  his  token  and  needs  access.  In¬ 
stead  of  issuing  another  token,  we  just 
issue  a  new  password.  Another  benefit 
is  that  we  can  embed  it  in  the  applica¬ 
tion.  The  problem  with  issuing  a  pass¬ 
word,  however,  is  that  it’s  a  departure 
from  the  two-factor  authentication  lev¬ 
el  of  security  that  we  get  by  using  a  to¬ 
ken.  Also,  embedding  a  password  into 
an  application,  especially  a  program 
that  can  reconfigure  network  devices, 
is  very  dangerous. 

We  also  considered  purchasing 
shorter  20-  or  30-second  tokens  for  the 
server  instead  of  the  standard  60-sec- 
ond  ones.  But  that  would  still  force 
users  to  wait  before  they  could  access 
another  device,  and  it  wouldn’t  address 
the  enterprise  management  issues. 
Another  potential  problem:  If  the  re¬ 
sources  are  in  another  country,  the  la¬ 
tency  involved  in  getting  packets  to  the 
devices  might  cause  timing  problems. 

Another  option  would  have  been  to 
force  the  use  of  tokens  but  allow  the  se¬ 
curity  administrator  to  assign  a  static 
password  in  cases  where  the  engineer 
must  access  many  devices  in  a  short  pe- 


TH  ISWEEK'SG  LOSSARY 

Two-factor  authentication:  This  au¬ 
thentication  method  requires  users  to 
provide  something  that  they  have  (a 
token)  and  something  that  they  know  (a 
PIN).  The  user  creates  the  PIN  when  the 
token  is  first  used.  Subsequent  uses  re¬ 
quire  the  combination  of  the  PIN  and  the 
generated  number  on  the  token. 

SECURITYBOO  KSH  ELF: 

Authentication:  From  Passwords  to 
Public  Keys,  by  Richard  E.  Smith  (Addi- 
son-Wesley  Publishing  Co..  2001):  Few 
books  are  available  on  authentication,  but 
even  if  there  were  more,  I  would  still  highly 
recommend  this  title.  Smith  takes  compli¬ 
cated  areas  of  access  control  and  pre¬ 
sents  them  in  an  easily  understood  format. 
Along  the  way,  he  covers  not  only  the  ben¬ 
efits  of  specific  technologies,  but  also  the 
drawbacks. 

LINKS: 

www.mddinc.com/PasswordBouncer/ 
lndex.htm:  Visit  Master  Design  &  Devel¬ 
opment  Inc.’s  Web  site  for  information  on 
Password  Bouncer,  a  great  tool  for  au¬ 
tomating  password  security  on  Windows 
servers. 

http://support.microsoft.  com/ 
default.aspx?scid=kb;EN-US; 
q161990 :  Microsoft’s  Passfilt.dll  is 
supplied  with  Windows  NT  Service 
Pack  2.  It  allows  administrators  to  imple¬ 
ment  a  strong  password  policy  without 
having  to  write  their  own  filters. 


riod  of  time.  But  since  we  don’t  have 
round-the-clock  coverage,  the  amount 
of  time  it  would  take  to  get  a  security 
administrator  on  the  phone  in  the  mid¬ 
dle  of  the  night  to  make  the  configura¬ 
tion  changes  would  be  a  problem. 

Finally,  we  discussed  scrapping  the 
whole  project  and  looking  for  an  alter¬ 
native.  Unfortunately,  we’ve  already  in¬ 
vested  thousands  of  dollars  in  the  prod¬ 
uct  and  support.  Returning  it  for  a  re¬ 
fund  isn’t  an  option  at  this  point. 

So,  do  I  force  the  networking  guys  to 
endure  the  60-second  time  interval,  or 
do  I  depart  from  two-factor  authentica¬ 
tion  and  assign  static  passwords?  If  you 
can  offer  a  good  solution,  I  invite  you  to 
comment  in  the  Security  Manager’s 
Journal  forum.  t 

Discuss  this  week's  column  and 
catch  up  on  the  latest  security 
developments  online  at: 

www.computerworid.com/q?q2000 


SECURITY 

MANAGER’S 

JOURNAL 


■  This  week's  journal  is  written  by  a  real  security  manager,  “Mathias  Thurman,”  whose  name  and  employer  have  been  disguised  for  obvious  reasons.  Contact  him  at  mthurman@hushmail.com  or  go  to  the  Security  Manager’s  Journal  forum. 


You  won't  see  the  next  network 
security  threat  coming. 


S7M7/V 


When  the  next  Code  Red,  Goner 
or  Nimda  comes  along,  STAT 
could  be  the  difference  between 
a  crippled  system  and  one  that's 
completely  unaffected. 


But  STAT  will. 

Arming  yourself  against  the  next  threat  requires  more  than  vigilance.  It  requires  a  new  level  of  defense. 
At  Harris,  we  know;  for  more  than  25  years,  we've  helped  keep  government  networks  secure — and 
now  we're  helping  businesses  stay  ahead  of  the  enemy  with  our  STAT  intrusion  prevention  tools.  For 
example,  STAT  Neutralizer™proactively  protects  servers  and  workstations  by  using  behavioral 
analysis  to  prevent  intrusions  and  malicious  activities  from  taking  place.  STAT  Neutralizer  provides  a  new 
layer  of  security  to  defend  your  network  during  its  most  vulnerable  time —  before  an  anti-virus 
update  can  be  downloaded.  And  that's  just  the  beginning  of  what  STAT  can  do.  To  start  winning  the 
war  on  cyberattacks,  call  1  -888-72 5-STAT  (7828)  today  or  visit  our  website. 


next  level  solutions 

STAT  ANALYZER 
STAT  NEUTRALIZER 
STAT  SCANNER 

pro.STATonline.com 
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DISRUPTION0 

CTO:  AGENT  for  CHANGE 

The  challenges  of  the  CTO  are  unlike  anyone  else’s.  You’re  the  one  that  everyone  comes  to 
for  answers,  solutions,  predictions  and  miracles.  As  the  miracle  worker  of  your  enterprise, 
it  is  your  job  to  decipher  what  works  and  what  doesn’t. 

Now  in  its  3rd  year,  this  invitation-only  conference  brings  together  an  exclusive  crowd  of 
people,  like  you,  who  are  driving  the  use  of  disruptive  technologies  to  transform  business 
processes  and  define  the  next  wave  of  innovation. 

Join  200  other  CTOs  for  2V2  days  of  networking,  keynotes,  panels,  practical  discussions,  and 
working  sessions.  Share  ideas  and  swap  stories  about  the  day-to-day  challenges  that  CTOs 
face  at  the  only  event  created  by  CTOs  for  CTOs. 

WHO  SHOULD  ATTEND? 

CTO  Forum  is  an  invitation-only  conference  for  CTOs  and  high-level  technology  executives. 
If  you  do  not  have  a  CTO  title,  but  are  making  high-level  technology  decisions,  you  may  still 
be  entitled  to  attend. 


FEATURED  SESSIONS 

■  The  Role  of  the  CTO  in 
Today’s  Economy 

■  Disruptive  Technologies:  From 
Annoyance  to  Reliance 

■  Extreme  Programming 

■  Grid  Computing 

■  Wireless  Infrastructure  Issues 

■  A  Look  Inside  the  Labs 


*  Software  as  a  Service 

■  Disaster  Recovery  Best  Practices 

■  Marriage  of  Business  and  Technology: 
Critical  Skills  for  CTOs 

■  Business  Continuity  Best  Practices 

■  IT  Project  Management  and  Priority- 
Setting  in  Today’s  Economy 

■  Next  Generation  Systems  Management 


SPECIAL  EVENTS 

*  Monday,  April  8,  2002  Pac  Bell  Park  Technology  Tour 

Be  our  guest  for  a  behind-the-scenes  technology  tour  of  Pac  Bell  Park,  home  of  the  San  Francisco 
Giants.  The  tour  will  be  conducted  by  the  SF  Giants  CIO  and  a  senior  IS  department  staff  member. 

*  Wednesday,  April  10,  2002  SF  Giants  vs.  LA  Dodgers  Baseball  Came 

Be  our  guest  as  the  San  Francisco  Giants  take  on  the  LA  Dodgers  at  Pac  Bell  Park  in  San  Francisco. 

*  Attendance  to  these  events  is  available  on  a  first-come  first-served  basis.  Space  is  limited. 
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Toshiba  TLP-670 

XGA  •  1300  Lumens  •  8  lbs. 


Mitsubishi  X70UX 

XGA*  1100  Lumens *7  lbs. 
3  Year  Warranty 
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Red  Hat  Linux*  Survival  Guide 
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Red  Hat  Linux*  Internet  Server 
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Diversity  in  IT  careers 


Sexual  Orientation  in  the  IT  Field 


By  Jennifer  Hicks 

OIMdiversity 

.com 

In  1990,  Jane  Icenogle,  a  software  engineer,  put  her 
name  on  a  flyer  announcing  a  meeting  of  the  gay  and 
lesbian  employees'  group  at  AT&T.  Later,  listening  to 
her  phone  messages,  she  heard  her  first  death  threat. 

"There's  a  wide  range  of  reactions  when  you  first 
come  out  at  work,"  says  Icenogle,  now  a  distinguished 
member  of  technical  staff  at  AT&T's  spin-off,  Lucent 
Technologies,  and  co-chair  of  EQUAL!  Lucent's  gay, 
lesbian,  bisexual,  and  transgender  (GLBT)  employee 
group.  "There's  a  physical  hurdle  in  coming  out,  a  fear 
you  have  to  get  over.  But  the  benefits  are  worth  it. 
Coming  out  has  been  a  positive  experience." 


The  Role  of  GLBT  Employee  Groups 

Icenogle  credits  particular  professional  organizations 
(see  sidebar)  and  GLBT  employee  affinity  groups  such 
as  Lucent's  EQUAL!,  Xerox's  Galaxe,  and  IBM's  EAGLE  as 
helping  create  the  positive  experience.  "It  makes  a  dif¬ 
ference  in  how  safe  you  feel  at  work  and  how  comfort¬ 
able  you  are  in  who  you  are,"  she  says.  "And  with  com¬ 
fort,  comes  productivity.  The  more  productive  you  are, 
the  more  you  can  contribute  to  the  bottom  line. 

Happy  employees  make  for  a  good  workplace." 

Many  of  the  top  gay-friendly  companies  (see  side- 
bar)  understand  this  and  have  created  their  own  GLBT 
groups  as  well. 

"Inclusion,  empowerment,  and  the  ability  to 
incorporate  one’s  orientation  into  one’s  work"  makes 
joining  such  groups  professionally  and  personally 
rewarding,  according  to  Sarah  Siegel,  program  direc¬ 
tor,  GLBT  sales,  at  IBM  and  co-chair  of  the  New  York, 
New  Jersey,  and  Connecticut  branch  of  IBM's  Employ¬ 
ee  Alliance  for  Gay  and  Lesbian  Empowerment. 

"Until  sexual  orientation  and  gender  issues  are  a 
non-issue  to  everybody,  there  will  always  be  a  need 


^  Professional  Organizations  of 

Interest  to  the  GLBT  Community 


•  national  Organization  of  Gay  and  Lesbian 

Scientists  and  Technical  Professionals,  Inc. 
http://www.noglstp.org/ _ 

•  Federal  Globe  Gay,  Lesbian,  Bisexual,  Transgender 
Employees  of  the  Federal  Government 


m 


http://www.fedglobe.org/ 


•  Digital  Queers  Initiative 
http://www.glaad.org/org/projects/dqi/index.html 

•  NIST  Globe.  Gay,  Lesbian,  or  Bisexual  Employees 
bttp.7/www.nist.gov/globe/ 

;  http://www.htg.org/  _ 

•  The  Lesbian,  Gay  and  Bisexual  Macintosh  User's 
Group  for  all  of  Los  Angeles  http://www.qmug.org/ 


for  GLBT  employee  support  groups,"  says  Barbara 
Belmont,  treasurer  and  office  administrator  of  the 
National  Organization  of  Gay  and  Lesbian  Scientists 
and  Technical  Professionals  (NOGLSTP).  "The  reality 
is  that  the  workplace  is  an  extension  of  family  for 
most  people,"  she  continues,  "and  socializing  is  an 
important  aspect  of  team  building  and  productivity. 
Another  purpose  is  to  give  collective  voice  and  per¬ 
sonnel  leverage  to  the  often-invisible  queer." 

Rachelle  Caruso,  an  information  services  analyst  at 
Intel  and  president  of  its  GLBT  employee  organization 
(HLOBE),  agrees.  "No  matter  how  much  support  there 
may  be,  there  is  still  a  large  majority  that  does  not 
accept  or  understand  what  it  means  to  be  gay, 
lesbian,  bisexual,  or  transgender.  Visibility  and  edu¬ 
cation  are  the  keys  to  promoting  diversity  and  accep¬ 
tance.  As  long  as  there  are  people  being  'gay-bashed' 
or  being  denied  promotions  due  to  their  sexual  orien¬ 
tation  or  gender  identity,  or  employees  that  are  fear¬ 
ful  of  being/showing  who  they  are  in  the  workplace, 
there  is  a  need  for  GLBT  groups,  both  within  and 
outside  of  IT." 


The  Numbers 

But,  just  how  much  of  a  need  exists? 

Take  a  look  at  Census  2000.  Gay  and  lesbian  fami¬ 
lies  live  in  99.3  percent  of  all  counties  in  the  United 
States.  There  were  601,209  same-sex  unmarried  part¬ 
ner  households  in  the  United  States  in  2000  -  a  314 
percent  increase  from  1990. 

However,  a  report  published  jointly  in  August 
2001  by  the  Human  Rights  Commission  (HRC)  and 
the  Urban  Institute  suggests  that  this  number  still 
represents  an  undercount  of  the  gay  and  lesbian 
population. 

While  the  HRC  indicates  that  gay  and  lesbian  fami¬ 
lies  may  have  been  undercounted  by  as  much  as  62 
percent,  the  joint  report  is  more  modest.  It  puts  the 
current  GLBT  numbers  at  five  percent  of  the  total 
population  over  18  years  of  age  -  or  10,456,405 
people  -  many  of  whom  are  well-educated. 

And  then,  take  a  look  at  the  employee  groups 
themselves.  EAGLE  has  1,000  members  among  22 
chapters  and  affiliates  in  15  countries;  EQUAL!  does¬ 
n't  keep  a  master  list,  but  believes  they  have  about 
400  members  in  the  U.S.  alone;  numbers  from  other 
employee  groups  are  sparse. 


Author  Bio: 

Jennifer  Hicks  is  director  of  online  content  for 
IMDiversity.com  (www.imdiversity.com),  the  web  site 
where  opportunities,  careers  and  diversity  connect. 
She  has  more  than  600  publications  to  her  name  and 
lives  in  the  Boston  area. 

Part  2  of  this  article  is  scheduled  to  run  on 
March  18,  2002.  Date  subject  to  change. 


Part  One 


e  Top  50  Fortune  500  Companies  for  GLBT  \ 

!  on  non-discrimination  policies,  i 
•  benefits,  revenues,  and  growth. 

‘  asterisk  *  denotes  companies  that  also  < 
ge  of  the  Employment  Non-Discriminatior 


4PANY 


IBM 

AT&T 


Bank  of  America  Corporate 
Hewlett-Packard  Company  * 


m 


Merrill  Lynch  &  Co.,  Inc 


Chase  Manhattan  Corporation 


Bell  Atlantic  Corporation 


Fannie  Mae 


Compaq  Computer  Corporation 
Lucent  Technologies 


Chevron  Corporation 
£*-'  t  Intel  Corporation 


The  Walt  Disney  Company 
Aetna,  Inc. 


Wells 


Xerox  Corporation 


ikM 


Sara  Lee  Corporation 


— 


The  Boeing  Company 


;  PG&E  Corporation _ 

American  Express  Company _ 

3.P.  Morgan  &  Co. _ ■  -J 

Bristol-Myers  Squibb  Compan 

Federated  Dept.  Stores,  Inc. 

Pfizer,  Inc. 


Time  Warner,  Inc. 


Microsoft  Corporation  * 

Eastman  Kodak  Company  EK  ’ 


Washington  Mutual,  Inc. 


— 


US  West,  Inc. 
Viacom,  Inc. 


— 


Banker's  Trust* 


Edison  International 


Fleet  Boston  Financial  * 


The  Seagram  Company,  Ltd. 
Nike,  Inc 


/  The  St.  Paul  Companies 


Gap,  Inc. 


— 


Marriott  International,  Inc. 
U.S.  Bancorp 


Electronic  Tele-Communicatic 
Costco  Wholesale  Corporation 
AMR  Corporation 


.  Freddie  Mac 


Sun  Microsysterms,  Inc. 


PacifiCerp 


— 


US  Airways  Group,  Inc. 


i 

sr. — 


Monsanto  Company  MTC 

/•  Cisco  Systems,  Inc. _ \ 

Honeywell  Inti.,  Inc,  * _ 

Unisys  Corp. _ 


Source:  The  Gay  Financial  Net 
http://www.gfn.com  and 
HRCs  "The  State  of  the  WorkpL 


IDG  Recruitment  Solutions  and  IMDiversity.com  are  partnering 
to  produce  career  related  advertising  supplements 
focusing  on  Diversity  in  Information  Technology. 

For  more  information  about  advertising, 
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Is  there  anything  about  the  home 
buying  process  you’d  like  to  change? 


You  can  start  right  here.  At  Freddie  Mac. 

We’re  an  investor-owned  Fortune  500®  company  with 
an  important  public  mission:  to  make  mortgages  less  costly 
and  more  accessible  so  more  families  can  own  homes. 

And  that  means  things  have  to  change.  Continuously. 
We’ve  already  developed  technology  that  speeds  up  the 
process  and  makes  it  more  efficient.  Now  we’re  pioneering 
technology  that  will  make  getting  a  mortgage  from  a  lender 
as  easy  as  clicking  a  mouse. 

If  you  want  to  work  for  a  company  that  demands  and 
rewards  innovation  (and  where  the  dress  is  business  casual), 
check  out  the  opportunities  at  freddiemac.com. 

The  work  you'll  do  here  will  be  groundbreaking.  Freddie 

Mac 


We  Open  Doors * 


www.freddiemac.com 


©2001  Freddie  Mac 
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Trusted  by 
more 
hiring 
managers 
than  any 
IT  space 
in  the 
world 


COMPUTER 


PwC  Consulting  is  one  of  Computerworld’s  Top  1 0  Best  Places  to  Work  in  IT.  We  continually  seek 
IT/Systems  Integration  Principal  Consultants  and  Consultants  in  the  following  areas: 


•  Application  Development 

•  E-Business 

•  Data  Warehousing 

•  PeopleSoft 

•  Siebel 
•SAP 

•  Oracle 

1  Systems  Administration/Integration 
•  Process  Improvemenf 

•  Strategic  Change 

•  Supply  Cham  Management 

•  Systems  Auditing 
•  Network  Integration 


Please  e-mail  your  resume  to:  mcsrecruiting@us.pwcglobal.com  by  either  pasting  your  resume 
within  the  body  of  the  email  or  attaching  as  a  single  text  or  html  file  www.pwcconsulting.com.  We 
are  proud  to  be  an  Affirmative  Action  and  Equal  Opportunity  Employer. 

PwC  Consulting 

A  business  of  PricewaterhouseCoopers 

PwC  Consu!ting™refers  to  the  management  consulting 
services  businesses  of  the  member  firms  of  the  worldwide 
PricewaterhouseCoopers  organisation. 


Talent  is 

ITcareers  andITcareers.com 
can  put  your  message  in 

the  fuel 

front  of  2/3  of  all  US  IT 
professionals. 

of  the  new 

If  you  want  to  make  hires, 

economy. 

make  your  way  into  our 
pages.  Call  Janis  Crowley  at 

Fill  up  with 

1-800-762-2977 

ITcareers. 

Network  W  orld  , 

COMPUTERWORLD, 

and  Info  World 
Help  You  Do 
A  Better  Job. 

Now  Let  Us  Help 
You  Get  One. 

C  ALL: 

1-800-  62-2977 

]  careers  com 
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IT  CAREERS 


Programmer  Analysts  &  Sr.  P/As. 
Design,  develop,  and  implement 
structure  and  components  of 
business  application  systems. 
Bachelors  degree  in  CS,  Eng’g, 
or  Bus.  related  major  req'd,  as  is 
2  yrs  exp.  job  off’d  or  a  computer 
programming  position.  Prior  exp. 
include  exp.  w/CICS.  COBOL  II, 
and  ADW.  Competitive  salary. 
Multiple  openings.  Resumes  to 
Becky  Schoepfle.  Job  No.  1 91 5. 1 8, 
Sallie  Mae.  Inc.,  11600  Sallie 
Mae  Drive,  Reston,  VA  20193. 


Need  Sr  Software  Engineer  to 
manage  teams  to  design/develop 
client  server/internet  appls  using 
HTML,  XML,  JavaScript,  ASP, 
VB,  Oracle,  SQL,  etc  under  Unix 
&  Windows  OS;  lead  teams  in 
testing  large,  complex  S/W  appls 
to  automate  business  processes 
using  various  testing  tools;  interact 
with  end  clients  and  evaluate 
team  members.  Require  MS  in 
CS  or  Engineering  (any  branch) 
with  3  yrs  exp  or  a  BS  or  foreign 
equiv  in  any  of  the  above  with  5 
yrs  of  relevant  progressive  expe¬ 
rience  in  IT.  Highly  competitive 
salary.  60%  traveling  involved. 
Send  resume  to:  InfoSmart  Tech¬ 
nologies,  Inc.  385  Leatherman 
Ct.  Alpharetta,  GA  30005 


BEST  Consulting  seeks  D/B 
App.  Dev.  for  Sea/Bell  area 
projects.  DESC:  Arch.,  dsgn,  & 
dev.  bus.  intell.  sys.  &  rel.  apps  & 
interfaces  util.  RDBMS,  SQL, 
VB,  extract,  transform  &  load 
tools,  reporting  tools,  Unix  &  Win 
o/s.  Dev.  data  models  &  d/b 
schemas.  Mng.  data  migration  & 
sys.  integration.  Travel  to  client 
sites.  REQ:  BS  in  Engr.,  CS, 
Math,  or  Phys.  +  3  yrs.  full  life 
cycle  dsgn,  dev,  &  impl.  of  c/s 
sys,  apps,  interfaces,  &  RDBMS 
util.  SQL,  HLL,  &  Win  o/s.  1  yr. 
performing  data  migration  &  sys. 
integration.  Prem.  sal.,  benes. 
&  bns.  Pis.  rep:  J.  King,  Job# 
CCL-89,  11255  Kirkland  Way, 
Kirkland,  WA  98033. 


Sr  Project  Manager  in  Manufac¬ 
turing.  Design  and  develop 
fiber  optic  components/products; 
direct/supervise  engineering 
personnel  in  the  testing  of  the 
optical  bandwidth;  integrate/ 
develop  the  optical  signal  &  coat 
processing  applications  as  well 
as  micro-resonator  tunable  filter 
manufacturing.  MSEE  plus  min. 
5  yrs  exp  in  relevant  field,  and 
min  3  yrs  exp  in  out-sourcing 
process  and  Asian  OEM  suppliers. 
Previous  R&D  project  manage¬ 
ment  execution  exp  is  pref'd.  Job 
Site  &  Intw:  San  Jose,  CA.  Send 
resume  to:  HR  Dept,  Oplink 
Communications,  3469  N.  First 
St,  San  Jose,  CA  95134:  EOE. 


Several  FT  positions  open  for 
exp'ed  Project  Mangers,  Prog / 
Sys  Analysts,  S/W  Engineers 
and  DBAs  skilled  in  some  of  the 
following:  Java,  HTML,  COM,  IIS, 
ASP;  Oracle,  Developer  2000, 
PL/SQL,  Power  Builder;  VB, 
SQL,  Sybase;  Windows  NT/UNIX 
admin,  web/wireless  technologies; 
datawarehousing;  database 
admin  etc.  Require  a  BS/MS  with 
cone,  in  CS/Engg  (any  branch) 
/Math,  Business  or  related  field. 
Highly  competitive  salary.  Travel¬ 
ing  involved  to  client  sites.  Send 
resume  to:  Cosyne  Enterprises, 
Inc.  3505  Koger  Blvd,  Suite  130, 
Duluth,  GA  30096. 


Senior  Database  Administra¬ 
tors:  Newton,  MA  office  needs 
experienced  individuals  for 
performance  monitoring,  tuning 
and  testing.  Send  resumes  to: 
C.  Wyzga,  EIS-CW02-SDBA, 
Eagle  Investment  Systems, 
65  LaSalle  Rd.,  W.  Hartford, 
CT  06107.  EOE/F/M/V/D/ 
Legal  workers  only  please. 


PROJECT  LEADER  wanted  by 
New  Jersey  based  Co.  Must 
have  Master's  degree  in  Comp. 
Sc.,  Engg.  &  4  yrs.  of  exp.  in 
Comp.  S/W  dev  and/or  consulting 
and/or  managing  of  Comp  S/W 
projects,  teaching  engg./SW 
prof  and  proficiency  in  UNIX, 
RDBMS,  C,  C++,  VB,  LP  and 
dynamic  programming.  Respond 
to:  Meganet  Solutions  LLC,  1141 
Green  St.,  Iselin,  NJ  08830.  (Ref. 
RG  8082).  No  phone  calls. 


COMPUTER  SPECIALISTS  - 
LaCie  is  seeking  qualified 
Computer  Specialists  to  serve  at 
its  subsidiary  in  its  Hillsboro 
office.  We  are  presently  seeking 
Programmers,  Programmer/An¬ 
alysts,  Systems  Analysts  and 
Database  Analysts  with  experi¬ 
ence  in  Cold  Fusion,  HTML, 
JavaScript,  or  Visual  Basic. 
Positions  require  degree/experi¬ 
ence.  For  immediate  considera¬ 
tion,  please  send  resume  (no 
calls)  to  LaCie,  22985  NW 
Evergreen  Parkway,  Hillsboro, 
OR  97124  ATTN:  HR  Computer 
Specialist. 


Geographic  Information 
System  Programmer  Analyst 

(The  Woodlands,  TX):  Designs 
and  implements  applications  to 
process  Geographic  Information 
Systems  (“GIS”)  data  generated 
by  laser  technology  using  AML 
and  C++  programming  skills  in 
Windows  NT  and  Unix.  Designs, 
develops,  and  implements  custom 
GIS  applications  in  forestry 
applying  knowledge  of  GIS  and 
forestry  ecology.  1  yr  related 
experience.  Contact:  Dan  Phillips 
of  Terra  Point  LLC  at  4800 
Research  Forest  Dr.,  The  Wood¬ 
lands,  TX  77381 .  (281 )  364-4082 
(T);  (281)  363-7931  (F), 


Software  Engineer  (St.  Louis)  to 
analyze,  design,  develop  and 
implement  client-server  system 
solutions  following  software 
development  life  cycle  processes 
using  Object  Oriented  method¬ 
ologies,  Java,  Jbuilder,  JDBC, 
GUI,  Unix,  Windows  NT,  Oracle 
and  SQL.  Require  BS  (or  the 
equivalent)  in  Comp.  Sci.,  EE, 
Math,  MIS  (or  in  a  closely  relat¬ 
ed  field)  plus  2  yrs.  related  exp. 
Competitive  salary.  Send  resume 
to  Sharon  Koch,  11605  Studt 
Ave.,  Ste  120,  St.  Louis, 
MO  63141; 

sharon.kocht@envision.com. 
No  phone  calls  /  EOE. 


Software  Dev.  co.  req.  Software 
Eng.  w/MS  &  1  yr.  exp.  or  its 
equiv.  &  Prog.  Analyst  w/BS  & 
18  mos.  exp.  or  its  equiv.,  in 
foil:  Visual  Basic,  Oracle, 
PowerBuilder,  Sybase,  Java, 
Unix,  C++,  AS/400,  SQL  Serv. 
Synon,  RPG/400,  Cobol,  Lotus 
Notes,  SAP,  Oracle  Financial, 
Java  Script,  HTML,  Win  NT, 
Mapics,  DB2,  ASP,  Corba, 
Win.  NT,  CICS,  ILE  RPG. 
Send  res.,  to  Attn:  Recruiter: 
Allied  Informatics,  Inc.  9111 
Cross  Park  Dr.  Ste.,  D-200, 
Knoxville,  TN  37923. 


SAP  Business  Information 
Warehouse  (BW)  company 
seeking  experienced  SAP  BW 
functional/technical  consultants 
familiar  with  generic  and  custom 
extractors,  data  modeling,  info 
sources  and  info  cubes.  Also 
seeking  SEM  and  Supply  Chain 
Management/APO  experience. 
Please  e-mail  resume  to  Busi¬ 
ness  Information  Solutions  at 
recruiting@bisamerica.com  or 
fax  to  (858)  458-5819. 


Direct  marketing  music  company 
is  seeking  a  Director  of  Web 
Production  to  research,  analyze, 
design,  and  administer  websites. 
Bachelor’s  degree  or  equivalent 
required  in  Business  Adminis¬ 
tration  or  Computer  Science  and 
2  years  of  experience  in  web 
development  and  editing  business 
content.  Please  mail  resumes  to 
Michele  Kahme,  BeMusic,  Inc., 
1540  Broadway,  N.Y.,  N.Y. 
10036. 


Call  your 
ITcareers  Sales 
Representative 
or  Janis  Crowley. 

1-800-762-2977 


Computers-Manager  MIS  (Dallas 
TX)  needed  to  oversee  develop¬ 
ment  of  systems  and  networked 
client/server,  multi-tiered  man¬ 
agement  software  for  manufac¬ 
turing/import  company  w/Windows 
NT,  VB,  SQL  Server  Design, 
ASP,  EDI  standards  &  add'l 
tools/languages.  Reqs  6  yrs  exp 
&  Bachelor's  Comp  Sci,  Engi¬ 
neering  or  Math.  Fax  resume  to 
214-760-0521 .  Attn:  A.  Krahmer. 


PROGRAMMER  ANALYST 
wanted  by  computer  consulting 
firm  in  Sugar  Land,  TX.  Must 
have  B.S.  in  Computer  Science, 
plus  2  yrs  exp.  Respond  by 
resume  to  Ms.  B.  Nelson,  S/R, 
Digital  Consulting  &  Software 
Services,  One  Sugar  Creek 
Center  Blvd.,  Suite  #500,  Sugar 
Land,  TX  77478. 


Chief  Computer  Programmer 
wanted  in  San  Francisco,  CA. 
Send  resume  to:  HR  Dept.,  Vik 
Consulting,  5715  Misty  Briar  Ct., 
Sugar  Land,  TX  77479. 


Software  Engineer  wanted  w/2 
yrs.  exp.  in  Houston,  TX.  Send 
resume  to:  HR  Dept.,  Epsolon 
Network  Inc.  11271  Richmond 
Ave.,  Suite  106-H,  Houston,  TX 
77082. 


♦ 


Sr.  Sys.  Apps.  Developer  -  Com¬ 
plete  analysis  of  client's  bus. 
reqs.  for  adv.  apps.  s/w  for  the  oil 
&  gas  industry.  Prep,  hi-level 
apps.  s/w  design  docs,  detailing 
all  aspects  of  s/w  coding  &  impl. 
Analyze  &  rev.  s/w  code.  Test 
diff.  bus.  scenarios  to  ensure  the 
s/w  meets  the  func.  reqs.  Finalize 
s/w  dev.  stds.  &  design  docs,  in 
accordance  w /  test  plans  & 
existing  dev.  stds.  Must  have  BS 
in  CS,  Info.  Sys.,  EE  or  academic 
equiv.  +  4  yrs.  of  exp.  in  the  dev. 
of  apps.  s/w,  incl.  1  yr.  of  exp.  dev. 
apps.  s/w  for  the  oil  &  gas  industry. 
Job  &  interview  location:  Engle¬ 
wood,  CO.  Salary  $75,000/yr. 
Mail  resumes  only  to:  Colorado 
Department  of  Labor  and 
Employment,  Employment  Pro¬ 
grams,  ATTN:  Jim  Shimada,  Two 
Park  Central,  Suite  400,  1515 
Arapahoe  Street,  Denver,  CO 
80202-21 1 7,  and  refer  to  order  # 
C05012339. 


SOFTWARE  ENGINEER  to 
provide  consultancy  in  design, 
analysis,  development  and 
maintenance  support  for 
Customer  Information  System 
on  IBM  mainframe  legacy  systems 
using  CICS,  COBOL  II,  DB2, 
VSAM,  JCL  and  Easy-Trieve; 
provide  performance  review  of 
on-line  and  batch  application 
code;  analysis  and  performance 
tuning  of  SQL  used  in  data  pro¬ 
cessing  programs;  and  provide 
production  call-out  support. 
Require:  M.S.  in  Computer 
Science  and  three  years  experi¬ 
ence  in  the  job  offered  or  any 
experience  providing  skills  in 
described  duties.  Salary:  $73,000 
per  year,  8  am  to  5  pm,  M-F. 
Apply  with  resume  to:  CEO,  FI , 
Inc.,  359  S.  Franklin  Street, 
Valparaiso,  IN  46383-6423. 


SYSTEMS  ANALYST/ASIC 
DESIGNER/CAD  ENGINEER: 
Analyses  user  requirements, 
procedures,  and  problems  to 
automate  proceessing  or  to  up¬ 
grade  existing  computer  system. 
Bachelors's  degree  in  Computer 
Science,  Engineering  or  math 
related  and  2  years  of  experi¬ 
ences  in  job  offered  required. 
Includes  in  those  2  years  must 
have  2  years  experience  with  C. 
C++  programming  languages, 
Should  be  able  to  do  RTL  coding, 
timing  analysis,  formal  verifica¬ 
tion,  ATPG,  internal  scan,  spice 
simulations,  package  designing 
for  a  chip  and  2  years  experience 
with  UNIX,  MSDOS  and  Windows 
95/98/NT  operating  systems. 
Must  be  able  to  travel,  $71,760/ 
year.  Apply  by  resume  only  to 
Immigration  Coordinator,  HRD, 
Time  To  Market,  Inc.,  4010 
Moorpark  Avenue,  Suite  #205, 
San  Jose,  CA  95117 


Software  Engineers  needed  by 
NJ  Based  IT  Co.  -  Masters  Deg 
with  1-2  yrs  Exp/Bach.  With  5yr 
exp; 

Programmer  Analyst-Bach.  Deg 
with  1-2yrs  Exp  in  job.  Exp.  in 
skill  sets  incl.:  Windows  NT, 
Java/Coldfusion,  Unix,  SQL/PL 
SQL,  SQL  Server,  VB/Developer 
2000,  Oracle  and  Cobol.  Optional 
Skills:  Peoplesoft/SAP/Siebel. 
send  2  resumes  to  HRD,  Accurate 
Software  International,  Inc.,  408B 
Plainsboro  Rd,  Plainsboro,  NJ- 
08536 


Kama  Consulting  Inc. 

TOP  $$’s,  W2  or  1099 

We  are  a  fast  growing 
Consulting  company  based 
in  New  Jersey. 
Excellent  opportunities  for 
Programmers, 

Systems  Analysts,  DBAs. 

Sun  Solaris  System  Admins, 
Natural,  Powerbuilder, 
ADABAS,  ORACLE,  SYBASE, 
PROGRESS,  COBOL 
TCP/IP,  Delphi/VB,  Windows  NT 

Send  your  resume  to 
Rod  McFadden 
Kama  Consulting 
Fax:201-934-7166 
Email:Kamaco@aol.com 


Software  Developer:  Dgtl  media 
&  image  frm  sks  softwre  dvlprs. 
Dvlp  &  cstmze  softwre,  rsrch, 
dsgn,  &  test  oprting  system 
softwre.  Req'd  BS  +  2  yrs  exp  in 
job  oftrd.  Send  covltr/res  to  Appl. 
Dvlpment,  Index  Stock  Imagery. 
Inc.,  23  W.  18th  St.,  NY,  NY 
10011. 
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Sr.  Software  QA  Engineer  needed 
to  develop  automated  testing 
environment  for  testing  GUI  and 
embedded  systems,  write/update 
test  plans  as  product  evolves, 
diagnose/debug  defects,  provide 
expertise  on  test  automation  and 
Linux  networking,  train  junior  QA 
engineers  and  manage  QA 
resources  w/in  time/cost  con¬ 
straints.  Requires  Master's 
degree  in  Computer  Science  or 
Comp.  Eng.  plus  1  yr  in  job  or  1 
yr  in  software  development/ 
testing,  writing/maintaining  test 
plans,  defining/executing  test 
cases,  involved  in  software 
product  quality,  fault  monitoring 
and  configuration  management. 
Software  development  experience 
in  automated  test  environment 
is  a  must.  Contact  Jen  Roy  at 
Archway  Digital  Solutions.  381 
E.  Evelyn  Avenue,  Mountain 
View,  CA  94041 .  Use  Code 
SWQA 


Programmer  Analyst  at  our 
Cedar  Rapids,  Iowa  location. 
Analysis,  design,  programming, 
project  management,  trou¬ 
bleshooting;  and  GUI  modeling 
for  the  new  Enterprise  System; 
support  of  related  systems;  and 
reviewing  the  work  done  by 
development  team  members. 
Must  have  Bachelor’s  degree  in 
Computer  Science,  Engineering 
or  related,  and  three  years 
experience  with  Java,  UNIX, 
application  servers,  and  Object 
Oriented  development;  two 
years  experience  with  VB  5.0,  C, 
and  C++;  and  one  year  experi¬ 
ence  with  JSP,  Apache,  Tomcat, 
and  EJB.  Send  resume  with  cover 
letter  to  Cindy  Corkery,  APAC 
Customer  Services,  Inc.,  6  Park¬ 
way  North  Center,  Deerfield, 
IL  60015.  EEO/AA  APAC 
CUSTOMER  SERVICES,  INC  is 
not  affiliated  with  APAC,  Inc.,  the 
road  paving  and  construction 
materials  company. 


Dantz  Development  Corp.,  seeks 
Sr.  Prog.  Mgrs.  for  Seattle,  WA. 
DESC:  Det  user  reqs  &  tech 
specs  based  on  analysis  of  exist, 
info  sys.  Dir  dsgn  &  dev  of  back¬ 
up/restore  prods  &  apps  for 
virtual  SAN  &  scaleable  sys 
arch,  inc  file  sys  internals  &  RAID 
tech.  Dev.  functional  &  operation 
specs,  features,  &  Ul  to  facilitate 
comm,  of  data  formats  &  trans. 
processes  bet.  new  &  existing 
sys  devices  &  apps.  Analyze  & 
coord  dev  &  test  of  new  prod, 
versions  util  internet  &  database 
protocols.  REQS:  BS  in  Engr., 
CS,  Math,  or  Phys  +  2  yrs  exp. 
dsgn  &  dev  databases  &  s/w 
apps  util  OO  design  &  prog  meth, 
HLL,  &  internet  technologies.  1  yr 
exp  dsgn  &  dev  SAN  or  NAS 
systems  prods  &  apps  util  file 
sys  internals  &  RAID  tech.  Com¬ 
petitive.  sal  +  benes  &  options. 
Pis.  Send  resumes  to  Jobs® 
Dantz.com.  You  must  include 
Reference  #JS-102.  Dantz  De¬ 
velopment  Corporation,  4  Orinda 
Way.  Building  C,  Orinda,  CA 
94563.  Principals  only. 

Equal  Opportunity  Employer 


♦ 


Project  Mngr  (Oakbrook,  IL) 
Manage  projects  by  planning, 
sched,  &  budgeting.  Provide  syst 
that  operate  in  cost-effective 
manner.  Work  w/clients  &  tech 
staff  to  resolve  problems  w / 
s'ware.  Formulate  project  objec¬ 
tives  &  syst  development  req'- 
ments.  Prep  project  plans  & 
sched,  incl  req'ments,  tasks, 
work  assignments,  resources, 
project  milestones  &  review 
points.  BS  in  Comp  Sci/InfoTech 
&  5  yrs  exp  req'd.  Exp  must  incl 
Cobol,  Sybase  &  APT  Work¬ 
bench.  $80,000/yr,  40  hrs/wk, 
9a-5p.  Applicts  must  show  proof 
of  legal  authority  to  work  in  US. 
Res  to:  IL  Dept  of  Empl  Security, 
401  State  St.  -  7  North,  Chicago. 
IL  60605.  Ann:  S.  Lindsey,  Ref 
#V-IL  28431  -L.  An  employer  paid 
ad.  NO  CALLS  -  Send  2  copies 
of  both  res  &  cvr  Itr. 
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Infobahn  Technologies  Delivers 
Innovative  IT  solutions  to  busi¬ 
ness  clients  nationwide.  We 
have  immediate  full  time  oppor¬ 
tunities  for  - 

★  a  Software  Business  Analyst 
to  consult  with  client  companies 
to  review,  analyze  and  evaluate 
their  business  systems  and 
write  detailed  description  of 
user  needs.  Create  technical 
specification  and  steps  re¬ 
quired  developing  or  modifying 
information  systems  applica¬ 
tions.  Automate  costing  and 
purchase  order  system  using 
MS  Access,  Oracle,  Crystal 
Report  and  VisualBasic  in  a 
Windows  NT  environment. 
B.S.  or  Associates  degree  in 
Accounting,  Computer  Science, 
Engineering  or  related  field  is 
required. 

A  a  Software  Engineer  for  Design, 
development,  implementation 
and  testing  the  web-based 
applications  allowing  for  online 
access  to  all  the  clients  prod¬ 
ucts  and  services.  Manage 
and  architect  a  solution  that 
integrates  the  clients  entire 
information  system  using 
JavaScript,  HTML,  DHTML, 
Java  Servelets,  Oracle  8i, 
PL/SQL,  JDBC,  JSP,  in  a  Unix 
&  Windows  NT  environment. 
Master's  degree  in  Computer 
Science  or  related  field  is 
required. 

Candidate  should  have  2yrs  of 
experience  in  job  offered  or  2 
yrs  as  a  Software  Developer. 
We  offer  excellent  salary  & 
benefits  package  for  40hrs/wk, 
8:00  to  5:00p.m.  Send  resume 
to:  Infobahn  Technologies, 
463  Worcester  Road,  #  303, 
Framingham,  MA  01701  or 
hr@infobahntech.com. 


ForestExpress,  LLC,  the  leading 
business-to-business  market¬ 
place  for  buying  and  selling 
forest  products,  currently  seeks 
applicants  for  the  following  posi¬ 
tions  in  its  Atlanta,  GA  corporate 
offices:  Senior  Architect:  bache¬ 
lor's  in  engineering,  computer 
science,  math  or  related  field 
plus  seven  years  of  hands- 
on  application  and  structured 
system  design/system  integration 
experience  including  two  years 
experience  with  distributed 
computing  protocols  DCOM, 
CORBA  and  XML.  Client  Delivery 
Manager:  bachelor's  in  computer 
science  or  engineering  plus  five 
years  of  relevant  experience  to 
include  at  least  two  years  of  ERP 
software  project  management. 
For  consideration,  please  forward 
your  resume,  along  with  a  state¬ 
ment  indicating  the  position  you 
are  applying  for,  to:  Forest 
Express,  LLC,  attention:  Human 
Resources,  500  Northridge 
Road,  Ste.  400,  Atlanta,  GA 
30350.  No  phone  calls  please. 
EOE. 


Web  Integration  Developer 

EGI  a  business  to  business  direct 
marketing  Company  has  an 
immediate  opening  in  our  New 
Hartford,  CT  facility. 

Candidate  must  posses  a 
bachelor's  degree  in  Industrial 
Engineering,  Computer  Science 
or  related  field  and  relevant  work 
experience,  include  industry 
experience  (business  to  business 
direct  marketing),  and  Web 
programming  and  knowledge  of 
manufacturing  process  as  it 
relates  to  imprinted  products  and 
Web  order  entry. 

Resume  and  cover  letter  must 
reflect  each  requirement  above 
and  specify  reference  code  WID 
and  salary  requirements  or  the 
resume  will  be  rejected. 

Please  forward  resume  to 
kkulha  @  executive  _greetings.co 
m.  or  EGI,  120  Industrial  park 
Rd.  New  Hartford,  CT  06057. 


Website  Designer/Developer 

Position  requires:  1)  Interface 
design,  2)  web/application 
development,  and  3)  web  appli¬ 
cation  deployment.  The  candidate 
must  be  able  to  develop  the  look, 
feel,  and  information  layout  of 
web  interfaces  using  a  combina¬ 
tion  of  business  and  marketing 
requirements  and  then  extend 
the  design  to  all  pages  or 
screens  of  the  application.  Finally, 
the  developer  is  responsible 
for  populating  these  pages 
with  content,  graphics,  links, 
JavaScript,  SSI  files  or  other 
types  of  code.  Must  have  BS  in 
Bus.  Admin,  or  Multimedia 
Design  &  ability  to  use:  Flash, 
Adobe  Illustrator.  Fire  Works, 
Dream  Weaver  &  Java  Script. 
40.0  hrs./wk  9:00  AM  -  6:00 
PM  $46,500/Yr. 

Applicants  send  cover  letter 
and  resume  to: 

Joe  LeCompte 
PMG.NET 

4470  Chamblee  Dunwoody 
Rd.,  #380 
Atlanta,  GA  30338 


SOFTWARE  ENGINEER 

Research,  design,  develop,  and 
test  computer  software  for  busi¬ 
ness  and  scientific  applications 
applying  priniciples  and  tech¬ 
niques  of  computer  science, 
engineering  and  mathematical 
analysis.  Analyze  software 
requirements  for  feasibility  of 
design  and  hardware  interface. 
Design  and  direct  software 
system  testing  procedures. 
Coordinate  requirements  and 
development  activities  with  local 
and  offshore  team.  Use  expertise 
in  Java.  J2EE,  JSP,  EJB,  Appli¬ 
cation  Server,  Servlets,  PHP, 
Perl,  Reporting  tools,  Oracle, 
Unix,  IBM  Mainframe  technolo¬ 
gies.  Requirements:  Bachelor's 
degree  in  computers  or  engineer¬ 
ing  and  four  years  of  experience 
as  a  software  engineer  or 
systems  analyst.  Apply:  PennSoft 
Solutions,  Inc.,  (HR)  11676 
Perry  Highway,  Wexford,  PA 
15090. 


Software  Engineer  to  design  and 
implement  POS  (Point-of-Sale) 
software  systems  of  restaurants, 
grocery  stores,  cleaners  and 
shopping  centers  using  Visual 
Basic,  SQL  Server  and  COM/ 
DCOM,  to  maintain  and  test  the 
products  with  receipt  printer, 
magnetic  reader,  bar-code  scan¬ 
ner,  pole  display  and  printer 
server,  to  connect  the  POS  client 
to  credit  card  processors,  to  pro¬ 
vide  training,  customizations  and 
technical  support  to  clients. 
Req.:  1  year  experience  with 
Point  of  Sale  applications  and 
proficiency  with  Visual  Basic, 
ASP  and  database  design.  M.S. 
in  Computer  Science,  field. 
$75k/yr.  40  hrs/wk.  Send 

resume  to  Mr.  James  Chen, 
Eskopi,  Inc.  1827  Powers  Ferry 
Rd,  Bdg  7,  Suite  100,  Atlanta, 
Ga  30339.  Ref:  GA-JS. 


Advisory  IT  Specialist,  Essex 
Junction,  VT.  Lead  developer  on 
SAP  Purchasing  Deployment 
within  division;  responsible  for 
setting  priorities  on  business 
deployment  using  SAP  &  de¬ 
signing,  testing  &  training  various 
division  users  worldwide  on  using 
deployed  SAP  function;  provide 
guidance  to  other  developers  & 
programming  support  personnel 
on  development  &  deployment  of 
SAP  function;  must  understand 
SAP  configuration  incldg.  ad¬ 
ministration  of  SAP  Purchasing 
Profiles  as  req'd  by  business 
initiatives.  Bachelor's  or  equiva¬ 
lent  foreign  degree  in  Comp  Sci, 
MIS.  Engg.  req'd.  +  1  yr  exp  in 
job  offer  or  1  yr  exp  as  SAP 
Consultant.  40  hrs/wk,  9am- 
6pm:  $72,800/yr.  Applicants 
should  send  resume  to  Attn: 
Job  Order  No.  613525,  Jobs  & 
Training  Div.,  VT  Dept  of 
Employment  &  Training,  PO  Box 
488,  Montpelier,  VT  05601-0488. 


Software  Engineer 

To  design,  develop,  implement 
and  testing  of  business  software 
application  using  Oracle  7.0/81, 
Visual  basic,  C++  &  SQL  Server. 
Perform  Oracle  database  design/ 
implementation,  create  front-end 
user  interface  and  ability  to  work 
on  Unix.  Req  2  yrs  exp  in  job 
offered  or  2  yrs  exp  as  a  Soft¬ 
ware  Developer.  Require  M.S.  in 
Comp-Sci,  Engg,  Management 
or  related  field.  Will  accept  5 
years  of  exp  in  lieu  of  the  educa¬ 
tional  and  work  requirements. 
Salary  is  $86,500/yr,  40  hrs/wk, 
8:00  to  5:00  p.m.  Send  two 
copies  of  resume  to  Case 
#20017838,  Labor  Exchange 
Office,  19  Staniford  St,  1st  fl„ 
Boston,  MA  02114. 


Senior  Data  Protection  Analysts. 

Responsible  for  research,  evalu¬ 
ation  and  implementation  of 
sophisticated  data  protection 
tools  and  services.  Requirements: 
bachelor’s  degree  in  computer 
science,  math,  MIS  or  related 
field  plus  5  years  of  progressive 
experience  in  systems  develop¬ 
ment  or  technical  services,  includ¬ 
ing  2  years  in  data  protection, 
plus  1  or  more  of  the  following: 
encryption  software;  firewalls; 
Perl;  C;  C++;  Linux/UNIX  admin¬ 
istration  and  scripting;  Windows 
NT  administration  and  scripting; 
Java.  Master's  degree  may  offset 
2  years  of  data  protection  expe¬ 
rience.  Positions  located  in 
Memphis,  TN.  Submit  resume  to 
Denise  Burns,  FedEx  Corporate 
Services,  1000  FedEx  Drive, 
Coraopolis,  PA  1 51 08. 


Supervisor  -  IT  Dvlpmt:  Direct  & 
coord  applic  dvlpmt,  rev  &  anal 
w/in  IT  dept.  Consult  w/mgmt 
re:  info  &  applic  reqmts  of  Co. 
Consult  w/dept  heads  to  define 
nature  of  projects.  Supv  activities 
of  IT  dvlpmt  personnel;  incl  qlty 
assur,  personnel  decisions  (hire, 
fire,  promot,  perf  evals,  etc),  & 
controling  expenses  w/in  unit. 
Direct  training  of  IT  employees. 
Supv  &  perform  comp  applic 
anal,  prgmg  &  implmtn  in  Oracle 
envrmt.  Prep  progress  reports  to 
inform  mgmt  of  project  status  & 
dev  from  goals.  Req  MS  in  comp 
sci,  engg  or  related  field  +  3  yrs 
progressive  exp  or  BS  in  comp 
sci,  engg  or  related  field  +  6  yrs 
of  progressive  exp.  Reqd  yrs 
of  exp  must  be  in  Oracle  dvlpmt 
envrmt  w/min  2  yrs  exp  in  ORA¬ 
CLE  Apps.  10.x,  PL/SQL,  & 
implmtn/support  of  ORACLE 
ERP.  $77,064.  Resumes  to: 
Char-Broil  Div./W.C.  Bradley  Co., 
Attn:  V.P.  HR,  PO  Box  1240, 
Columbus,  GA  31904-1240. 


SYSTEMS  ANALYST  to  provide 
on-site  consulting  in  analysis, 
design,  development  and  imple¬ 
mentation  of  business  to  busi¬ 
ness  and  enterprise  integrations 
of  applications  in  manufacturing, 
distribution  and  retail  industries, 
on  AS/400  with  DB2/400  and 
webMethods  B2B  server,  EDI  to 
support  enterprise  applications 
like  Shop  Floor  tracking  system 
(MESA),  Net  ERP  Suite,  PKMS 
application  using  DB2/400,  RPG, 
RPGLE,  COBOL  with  webMeth¬ 
ods  integration  tools.  Require: 
B.S.  in  Computer  Science  or 
Electrical  Engineering  with  two 
years  experience  in  the  job  offered 
or  as  Software  Engineer.  .40% 
travel  to  client  sites  within  the 
United  States  required.  Compet¬ 
itive  salary  and  benefits,  40 
hours/week,  8  am  to  5  pm,  M-F. 
Mail  resume  to:  Vice  President, 
Frontline  Consulting  Services, 
Inc.,  8701  Mallard  Creek  Road, 
Charlotte,  NC  28262. 


Telecommunication 

Programmer 

Design,  develop,  implement,  and 
administer  telecommunications 
software  for  wireless  systems 
(CDMA)  and  Analog  communi¬ 
cation  networks  (Sonet/Atm)  in 
WIN,  Advance,  UNIX,  AND  Linux 
environments.  Req:  MS  in  Elec¬ 
trical  Engineering  and  Wireless 
communications  certification. 
Resume:  HR  Dept,  IS  COM¬ 
PLETE  INC,  70  East  Palisades 
Ave,  Englewood,  NJ  07631 . 


Software  Engineer  wanted  by 
org.  in  Stony  Brook,  NY.  Reqs 
Master  or  equiv  in  Com.Sc./Eng 
+  3  yrs  exp;  or  Bach  or  equiv  in 
Comp  Sc/Eng  +  5  yrs  progressive 
exp  w/Visual  C++,  VB,  SQL 
Server,  Socket  prgm,  COM.  Fax 
resume  to  HR  Dept,  (631)  444- 
6340. 


Sr.  Systems  Analyst,  Edison,  NJ. 
Must  have  Bachelor's  degree  in 
Comp.  Sc.,  Engg.  Proficiency 
with  RDBMS,  Visual  Basic, 
JavaScript,  ASP.  5  yrs  of  exp.  in 
the  job  duties  or  Comp.  Software 
Developing  and/or  Consulting. 
Send  resume  to  HR  Dept.,  Ref# 
GG8092,  Savant  Consulting 
Group,  505  Thornall  St.,  Ste. 
205,  Edison,  NJ  08837  or  fax  to 
732-744-0135  (no  phone  calls 
please). 


Software  Engineer,  Alpharetta, 
GA;  Develop,  design,  test  and 
document  Web  applications  using 
Java,  VC++,  Java  Script,  HTML 
&  ASP.  Provide  technical  support 
req’d.  Bachelors  in  Engg.  Or 
Comp.  Scie.  Or  Math.  6  months 
exp  in  job  offered  or  6  months 
exp  in  Computer  Related  Pro¬ 
fession.  40  hrs/wk.,  Mon-Fri, 
$65,000.00/Yr.  Interested  appli¬ 
cants  to  apply  in  person  or 
by  sending  two  resumes  to: 
North  Metro,  Job  Order  #GA 
7060209,  2943  N.  Druid  Hills 
Rd.,  Atlanta,  GA  30329  or  the 
nearest  Department  of  Labor 
Field  Service  Office.  An  employer 
paid  ad.  “Must  have  proof  of 
legal  authority  to  work  in  the 
U.S." 


Software  Engineer  w/MS  in  CS, 
CE  or  related  w/1  yr  exp  in  soft¬ 
ware  development  to  include  at 
least  6  mos  exp  w/JS,  SSJS, 
Java,  Servlet,  XML  &  SQL.  May 
have  BS  w/2  yrs  same  exp.  Will 
work  on  e-business  and  web  dev 
projects  for  HR  admin  and 
benefits  appl.  Resumes  to  M. 
Townsend,  Employease,  Inc, 
One  Piedmont  Center,  Suite 
500,  Atlanta,  GA  30305 


SOFTWARE  ENGINEER  (2  po¬ 
sitions)  to  provide  in  depth  analysis, 
design,  development  and  testing 
services  for  IT  projects  in  SAP 
and  Internet/Web  Technologies; 
responsible  for  project  scooping, 
project  planning  project  time  and 
cost  schedules,  quality  of  deliv¬ 
erables;  study  and  evaluate  new 
technologies  and  methodologies; 
provide  technical  and  business 
guidance  for  complex  user 
problems.  Require  Masters  in 
business,  computer  science  or 
engineering  (any  branch)  with 
one  year  exp  in  IT.  Competitive 
salary.  Some  travel/relocation 
required.  Send  Resumes  to: 
UNILINX,  4625  Alexander  Drive, 
Suite  1 1 0,  Alpharetta,  GA  30022. 

MANAGER,  Software  Research 
&  Development  sought  by  NJ 
based  Securities  Dealer.  Must 
possess  Bachelor's  degree  or 
equivalent  in  Computer  Science 
or  directly  related  field  and 
5  years  exp.  in  software/systems 
development  and  design.  Re¬ 
spond  to:  Human  Resources 
Department:  Knight  Trading 
Group,  Inc.,  525  Washington 
Blvd.,  Jersey  City,  NJ  07310. 

SOFTWARE  DEVELOPERS- 
Technology  management  con¬ 
sulting  firm  has  opportunities  for 
Software  Developers  with  heavy 
experience  in  Visual  Basic  and 
SQL  Server  using  COM  archi¬ 
tectures.  Must  also  have  working 
knowledge  and  experience  using 
pre-release  versions  of  VB.NET. 
Positions  require  degree  plus 
experience.  For  immediate  con¬ 
sideration,  please  send  your 
resume  (no  cails)  to:  ETC,  305 
Madison  Ave.,  Room  2130,  NY, 
NY  10165,  ATTN:  K.  Fama. 


Software  Enggr  to  implement  & 
support  Peoplesoft,  Computron, 
&  Clarus  financial  sys.  Develop 
&  customize  reports  using  SQR, 
Crystal  Nvision,  Oracle  developer 
on  Unix,  CA  Unicenter  environ¬ 
ment  under  different  database 
platforms.  Must  have  5  yrs.  exp. 
in  designing,  developing  & 
implementing  financial  sys.  Send 
covltr/res  to  Alan  Gemsa,  HR 
Dir.,  J.H.  Cohn,  LLP,  75 
Eisenhower  Pkwy,  Roseland,  NJ 
07068. 


SR.  APPLICATIONS  ANALYST 
sought  by  NJ  co.  engaged  in 
comp,  systems  &  appl.  dev.  for 
bank  operations.  Must  have 
Bachelor's  in  Comp.  Sci.  or 
Comp.  Engg.  +  2  yrs.  exp.  in 
analyzing,  developing,  imple¬ 
menting  &  maintaining  financial 
info,  &  reporting  systems  for 
bank  operations  &  supporting 
appl.  for  clearance  &  settlement 
of  trust  accounts.  Respond 
to  HR  Dept.,  RD-1 ,  BTM  Info. 
Services,  Inc.,  Harbourside 
Financial  Ctr.,  Plaza  III.  Jersey 
City,  NJ  07311.  EOE. 


Scientific  Programmer/Analyst. 
Manhattan.  Design  and  develop 
JSP-based  web  interface  for 
updating  and  querying  of  gene 
expression  and  other  biomedical 
research  data,  and  design  biology- 
oriented  databases.  Bach,  or  MS 
degree  in  Comp.  Sci.  or  related 
field  with  exp.  Send  resume  to: 
Ms.  Mukades  Tahiraj,  Columbia 
Genome  Center,  1150  St. 
Nicholas  Ave,  New  York,  NY 
10032. 


Sr.  Database  Administrator- 
Williamsport,  PA.  Experience  in 
design  and  development  of 
applications  using  SQL  Server, 
Oracle,  DB2,  Unix  and  SAP  R/3. 
Attractive  compensation  package. 
Send  resume  to  Supriya 
Palayekar,  Palayekar  Companies, 
Inc.,  1959  East  Third  Street, 
Williamsport,  PA  17701. 


Programmer-Analyst  for  lighting 
manufacturer  in  Peachtree  City, 
GA.  Minimum  two  years  experi¬ 
ence  planning,  developing,  de¬ 
bugging  and  testing  application 
programs  in  an  IBM  mainframe 
platform  using  COBOL,  CICS 
and  IMS,  including  designing 
and  developing  back-end  appli¬ 
cations  for  the  web,  modifying 
existing  programs  against  user 
requirements,  performing  disaster 
recovery  operations  and  main¬ 
taining  system  documentation. 
Send  resume  to  Margaret  Abell, 
Cooper  Lighting,  1121  Highway 
74  South,  Peachtree  City,  GA 
30269. 


Software  Engineer  wanted  by 
a  Telecommunications  co,  in 
Boston,  MA.  Must  have  a  Bach¬ 
elor’s  degree  in  Comp.  Sci., 
M.I.S.,  Eng.  or  related  field 
&  1  yr.  exp.  as  a  Software  Engi¬ 
neer/Software  Developer  or 
related  occupation.  Exp.  must 
include:  OOA,  OOD,  C++,  Java, 
GUI  development,  Windows 
Platform  SDK  programming, 
XML,  Multi-thread  programming, 
Network  programming  in  TCP/ 
HTTP  and  SQL.  Please  respond 
to  Net2Phone,  Inc.,  200  High 
Street,  3rd  Fl„  Boston,  MA 
02110.  Attn:  Matt  Eichner 
reference  #WHC8. 


Programmer  Analyst.  8a-5p.  40 
hrs/wk.  Analyze,  dsgn,  prgm  & 
implmt  business  applies,  dvlp  & 
maintain  web  applies  using  Java, 
JDK,  JDBC,  Applets,  Swing, 
Servlets,  RMI,  C,  C++,  Oracle 
&  Win  NT.  Bach  of  Sci  or  equiv 
foreign  deg  req'd  in  Comp 
Sci/Engg;  S/ware,  Electrical, 
Electronics  or  related  Engg. 
Resume  to:  Gainesville  Masters 
LLC,  1585  Monroe  Dr, 
Gainesville,  GA  30507. 


A  new  millenium,  a  new  st  luti  n.  iTcar  ers. 

Call  Janis  Crowley  at  1-800-762-2  77  :  = 
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IT  CAREERS 


Project  Engineer,  Embedded 
Software:  Primary  technical 
responsibility  for  the  interpretation, 
analysis,  design  and  implemen¬ 
tation  of  drive  systems-embedded 
software  projects.  Develops 
software  requirement  concepts. 
Implements  analysis  and  simu¬ 
lation  of  design  concepts  to 
determine  feasibility.  Develops 
the  software  architecture.  Prepares 
computer  simulations,  control 
function  diagrams,  E-R  diagrams 
and  documentation.  Implements 
the  software  utilizing  the  most 
cost-effective  methods.  Ensures 
system  integrity  through  the  use 
of  appropriate  software  design 
methodologies  and  documentation 
practices.  Works  in  a  cross-func¬ 
tional  team  environment  to 
develop  and  maintain  drive  and 
power  conversion  controls. 
Provides  technical  software 
support  throughout  the  entire 
product  development  lifecycle, 
including  the  design,  implemen¬ 
tation,  verification  and  validation 
testing,  documentation,  product 
release,  and  ongoing  product 
maintenance.  Directs  the  devel¬ 
opment  and  debugging  of  proto¬ 
types  of  designs.  Ensures  that 
ISO  design  procedures  and 
guidelines  are  adhered  to 
throughout  all  the  phases  of  the 
development.  Coordinates  the 
activities  of  one  or  more  software 
engineers  and/or  technicians  on 
a  per  project  basis.  Required  is 
a  Bachelor  of  Science  degree  in 
Computer  Science,  Electrical 
Engineering,  or  Data  Processing 
and  six  (6)  years  of  experience 
in  the  position  being  offered  (i.e. , 
Project  Engineer,  Embedded 
Software)  or  six  (6)  years  of 
experience  as  a  Software  Engi¬ 
neer  or  Developer  -  Embedded 
Software.  In  lieu  of  a  Bachelor  of 
Science  degree  and  six  years  of 
experience,  the  employer  will 
accept  an  Associate  degree  in 
Computer  Science,  Electrical 
Engineering  or  Data  Processing 
and  eight  (8)  years  of  experience 
in  the  position  being  offered  (i.e., 
Project  Engineer,  Embedded 
Software)  or  eight  (8)  years  of 
experience  as  a  Software  Engi¬ 
neer  or  Developer  -  Embedded 
Software.  As  part  of  the  required 
experience  in  the  position  being 
offered  or  in  the  related  occupation, 
the  applicant  must  have  Had 
experience  in  designing  and 
developing  motor  control/drive 
system  software  and  industrial 
network  system  software  for 
industrial  automation  applica¬ 
tions;  had  experience  with 
firmware  design  and  develop¬ 
ment;  had  experience  with  C, 
Assembler,  and  C++  program¬ 
ming  languages;  and  had  expe¬ 
rience  with  microprocessor  or 
digital  signal  processor  pro- 
ramming.  Monday  through 
riday;  8:30  am  to  5:00  pm; 
40  hours  per  week;  $70,000 
annually.  Qualified  applicants 
may  submit  two  (2)  copies  of 
resume  and  cover  letter  to:  Mike 
Brooks,  DWE-FLC,  PO  Box 
7972,  Madison,  Wisconsin 
53707-7972.  Please  reference 
case  number  Cl  021 65. 


ANALYST/PROJECT  PRO¬ 
GRAMMER:  Provide  design, 
development,  implementation 
and  maintenance  support  for 
World-Wide-Web  (WWW)  data¬ 
base  applications  for  biological 
and  medical  scientific  research. 
Involves:  WEB  content  develop¬ 
ment,  database  design  and 
implementation,  CGI  and  JAVA 
application  design  and  imple¬ 
mentation  and  application  inter¬ 
facing  with  databases  (ORACLE); 
work  with  Director  and  project 
scientists  to  create  WWW  appli¬ 
cations  to  conduct  data  collec¬ 
tion,  validation  and  anlaysis  to 
directly  support  and  conduct  the 
research  project;  development 
of  projects  in  both  UNIX  (SUN 
Solaris)  and  PC  (Win  95  and  NT) 
systems.  Uses  Perl,  CGI  and 
relational  database  design  and 
implementation  (ORACLE)  to 
perform  duties  .  Masters  degree 
in  Mathematics,  Computer 
Science  or  biological  sciences 
required.  40  hrs/wk.  3  positions 
available:  Bioinformatics  Research 
Center  (2),  General  Clinical 
Research  Center  (1).  Reply  to: 
Medical  College  of  Wisconsin, 
Employment  Office,  8701 
Watertown  Plank  Rd, 
Milwaukee  Wl  53226. 


IT  CAREER 
OPPORTUNITIES 

CONNETICUTT 

Sr.  Bus.  Anal. 

Sr.  Program  Anal. 

DELAWARE 

Comp.  Scientist 
Supp.  Anal. 

CS.  Program/Anal. 

Network  Eng. 

Oracle  DBA 
SMTS  Program/Anal. 

MASSACHUSETTS 

Comp.  Scientist 
Sr.  App.  Developer 
Sr,  Consult. 

Sr.  Oracle  PL/SQL  Dev. 

NEW  JERSEY 

Comp.  Scientist 
Sr.  Consultant 

NEW  YORK 

Comp.  Scientist 

OREGON 

Sr.  ERP  Prod.  Specialist 

TEXAS 

App.  Consult.,  GraphTalk 
App.  Developer 
Bus.  Development 
IS  Specialist 
Lead  Systems  Eng. 

Tech.  Specialist 
Sr.  Comp.  Scientist 

WASHINGTON 

ERP  Prod.  Specialist 
Sr.  Consult. 

Tech.  Designer 

Some  positions  may  require  a 
BS/MS  degree,  relevant 
experience,  or  a  combination  of 
experience  and  college  level 
education  may  be  accepted  for 
some  positions.  The  flexibility  to 
travel  and  be  on-call  may  be 
necessary.  All  positions  involve 
public  speaking  and  presentations 
to  clients  and  prospective  clients. 
Salary  is  DOE.  Proof  of  legal 
authorization  to  work  in  the  U.S.  is 
required. 

We  offer  excellent  compensation 
and  a  comprehensive  benefits 
package.  Please  forward  your 
resume  to:  Email:  cschr@csc.com 
referencing  KH-CW-202  in  the 
subject  line.  Mail:  Attn:  Kim  Hale, 
2100  E.  Grand  Ave.,  El  Segundo, 
CA  90245.  Please  indicate  the 
specific  title  and  location  of  job  for 
which  you  are  applying  on  your 
application  letter.  EOE.  M/F/D/V. 
HTTP://CAREERS  CSC.COM 


SYSTEMS  FIELD  CONSULTANT. 
Provide  computer  support  to 
company's  medical  industry 
clients  in  Milwaukee,  Waukesha, 
Racine,  Kenosha  &  Washington 
Cos.,  Wl,  &  other  client  sites  as 
req’d:  Analyze  user  requirements, 
procedures  &  problems  to  auto¬ 
mate  processing  or  to  improve 
existing  computer  system. 
Involves:  Install,  configure, 
support  &  upgrade  networking  & 
UNIX  systems  including  Linux, 
SUNOS,  Windows  NT/2000, 
SQL  7.0/2000,  Apache,  IIS,  & 
Cisco-PIX  &/or  Proxy  servers. 
Use  Perl,  Korne,  Shell  script, 
Visual  Basic,  Java,  SQL,  C-CGI 
programming  &  medical  based 
systems  &  software  to  analyze, 
research,  design  &  solve  problems 
concerning  system  usage/ 
capacity,  security,  internet,  client 
access  &  communication  prod¬ 
ucts.  Provide  user  support  & 
training,  software  integration  & 
customization  as  req’d.  Uses 
the  following  to  perform  duties: 
UNIX  (Sun  Solaris,  HP-UX,  AIX, 
Linux  &  SCO),  Oracle,  MS  SQL 
&  SQL  Server  databases;  Novell 
&  Windows  NOS;  C,  CGI,  Perl 
languages  &  Korn  shell  scripts; 
Apache,  IIS,  FreeBSD,  Linux, 
iPlanet,  Internet  web  solutions 
&  servers;  Unix  &  Microsoft 
Firewall  &  security  systems; 
MailServer,  SendMail,  Qmail  & 
Exchange  mail.  Must  have 
Master's  in  Comp.Sci./related 
field;  or  Bachelor's  in  Comp. 
Sci./relatedfield  +  2yrsexp.  40 
hrs/wk.  Submit  applications  to: 
Chaney  Systems  Inc.,  Attn:  C.A. 
Morgan,  5100  S.  Calhoun  Rd, 
New  Berlin  Wl  53151 


Intellisys  Technology  is  a  fast 
growing  Chicago  based  IT 
consulting  group  with  clients  all 
over  the  USA  in  leading  edge 
areas  such  as  eCommerce, 
ERP,  Automated  Testing  and 
Client  Server  MultiTier  Systems. 
Intellisys  is  looking  for  Programmer 
Analysts,  Software  Developers 
and  Project  Managers  with 
experience  in  one  or  more  of 
the  following  skills: 

C++,  C,  VC++ 

Java/Java  Web  Server,  Java 
Script 

VB.  VB  Script,  ASP,  ActiveX, 
COM, DCOM 

CGI.  Servlets,  CORBA,  Perl 
VJ++ 

HTML,  DHTML,  XML 
JAVA  APPLETS 
COLD  FUSION,  HTTP 
SEGUE/RADVIEW  TOOLS 
Large  Scale  System  Design/ 
Architecture  Testing  Experience 

All  jobs  require  a  minimum  of 
Bachelors  Degree  or  equivalent 
in  Computer  Science  or  related 
fields. 

Project  Managers  require  Masters 
in  Business  Administration. 

If  you  are  at  all  interested  in 
our  company,  please  mail,  fax 
or  email  your  resume  clearly 
mentioning  reference  number 
CW0202  to:  INTELLISYSTECH- 
NOLOGY  LLC.,  801  N.  Cass 
Avenue,  Westmont,  IL  50559; 
fax  (630)  455-1333; 
email:  recruit&7hillisys.com 


Systems  Analyst  (2  openings) 

•  Senior  Systems  Analyst: 
Responsible  for  analysis  of  user 
reqs.,  procedures  &  problems  to 
automate  processing  or  enhance 
/improve/redevelop  existing 
computer  system  capabilities. 
Must  be  experienced  w/VB, 
Java,  C,  HTML,  XML,  SQL,  BEA 
Weblogic,  IBM-MQ,  Com, 
CORBA,  J2EE,  DCOM,  Sybase, 
SQL,  Oracle,  Rational  Rose  & 
Irwin.  M.S.  in  Computer  Science, 
Math,  Engineering  or  related 
field  required.  Will  accept  B.S.  in 
Computer  Science,  Math,  Engi¬ 
neering,  or  related  field  +  5  yrs 
progressive  experience.  Frequent 
travel.  $80K/ year.  Send  Resume 
to  HR  @  Vector  Consulting,  6455 
East  Johns  Crossing,  Suite  450, 
Duluth,  GA  30097. 

*  Systems  Analyst: 

Responsible  for  analysis  of  user 
reqs.,  procedures  &  problems  to 
automate  processing  or  enhance/ 
improve/redevelop  existing  com¬ 
puter  system  capabilities.  Must 
be  experienced  w/RDBMs,  SQL, 
VB,  PS/SQL,  C++,  JBuilder, 
Visual  Interdev,  DB2,  Oracle  & 
Java  Script.  B.S.  in  Computer 
Science,  Math,  Engineering,  or 
related  field  +  4  yrs  experience 
required.  Frequent  travel.  $72K 
/  year.  Send  Resume  to 
HR@Vector  Consulting,  6455 
East  Johns  Crossing,  Suite  450, 
Duluth,  GA  30097. 


Systems  Analyst.  Duties:  Resp. 
for  testing  &  verifying  code  for 
assigned  appls.  incl.  determining 
test  require.,  developing  &  main¬ 
taining  test  guidelines,  test  cases 
&  test  scripts  &  coord,  test 
sched.  using  SilkTest  &  Rational 
Test  Studio.  Conduct  systems 
integration  &  functional  &  regres¬ 
sion  testing  using  Silk  Radar. 
Manage  defect  reporting  tools 
&  perform  testing  research  using 
Silk  Radar.  Analyze,  design,  de¬ 
velop  &  maintain  appls.  using 
PL/SQL,  Developer  2000  &  Oracle 
Express.  Requires:  B.S.  (or 
foreign  equiv.)  in  Comp.  Sci., 
Eng.  or  a  related  field  and  2  yrs. 
exp.  in  the  job  offered  or  2  yrs. 
exp.  as  a  Prog/Analyst.  Concur¬ 
rent  exp.  must  incl.  2  yrs.  exp. 
testing  &  verifying  code  incl. 
determining  test  requirements 
&  developing  &  maintaining  test 
guidelines  &  2  yrs.  exp.  using 
PL/SQL  &  Developer  2000. 
EOE.  40  hrs./wk.;  8:00  a  m.  to 
5:00  p.m.  Send  resume  (no  calls) 
to:  Kim  Krentzman,  CTG,  Inc., 
13220  Metcalf  Ave.,  Ste.  140, 
Overland  Park,  KS  66213. 


Staff  Software  Engineer,  Essex 
Junction,  VT.  Data  &  dimensional 
modeling;  analysis  of  business 
requirements  for  manufacturing 
&  engineering  units;  problem 
solving  &  identification  of  data 
quality  issues  within  a  data  ware¬ 
house  framework;  test  plan 
implementation,  execution,  pro¬ 
duction  &  deployment;  perfor¬ 
mance  tuning  of  Datamart  in 
a  Datawarehouse  framework 
utilizing  e-business  skills  &  Oracle 
relational  database  management 
system.  Master's  degree  or 
equivalent  in  Comp  Sci,  MIS  or 
Engineering  req'd  +  1  yr  exp  in 
job  offer  or  1  yr  exp  as  Ebusiness 
Analyst,  Systems  Analyst,  Data¬ 
base  Administrator  or  Consultant. 
Employer  will  accept  a  US  or 
foreign  equivalent  Bachelor's 
degree  +  5  yrs  of  progressively 
more  responsible  work  exp  in 
lieu  of  a  Master's  degree.  Exp. 
must  incl.  6  months  in  data  ware¬ 
house  framework  design  or 
performance  tuning  &  use  of 
SQL  for  RDBMS.  40  hrs/wk, 
8:00am-5:00pm;  $73,500/yr. 
Applicants  should  send  resume 
to  Attn:  Job  Order  No.  622828, 
Jobs  &  Training  Division,  VT 
Dept  of  Employment  &  Training, 
PO  Box  488,  Montpelier,  VT 
05601-0488. 


Senior  Software  Engineer: 

Develop  software  for  business 
applications  including  information 
systems,  mobile  &  remote  data 
collection  systems.  Manage  IT 
resources  of  company  &  sub¬ 
sidiaries.  Develop  softw  for  new 
applications  &  enhance  existing 
applications  using  softw  archi¬ 
tecture  &  coding  to  satisfy  busi¬ 
ness  requirements.  Enhance 
existing  products,  including 
softw  code  maintenance,  adding 
new  features  &  improving  overall 
performance.  Manage  softw 
development  team  &  technical 
staff  &  participate  in  business 
strategy  decisions  for  company 
&  subsidiaries.  Salary:  $1 00,000 
/yr.  F/T,  M-F.  Must  have:  Master's 
or  equiv  in  Information  Systems, 
Comp  Sci  or  Business;  6  yrs 
exper  in  job  offered  or  in  systems 
design,  as  softw  developer  or 
softw  engineer  &  Oracle,  MS 
SQL  Server  6.x  &  7,  Lotus 
Domino  Server  4.x  &  5.x.  Two 
resumes  to:  Case  #20017713, 
Labor  Exchange  Office,  19 
Staniford  St,  1st  FI.,  Boston,  MA 
02114. 


S/W  Engr.  to  provide  consultancy 
on  customer’s  location  to  create 
user  req.,  logical/physical  design 
with  Rational  Rose,  lead  imple¬ 
mentation  &  testing,  &  provide 
maint.  &  cust.  support.  Skills 
used  are  C++  &  Java  on  Windows 
&  Unix  systems.  Oracle,  S/W 
optimization,  tuning,  multi-thread¬ 
ed  prog.  exp.  reqd.  Edu/Exp  reqd 
-  MS  in  CS  or  equivalent.  5+ 
years  exp  in  job  duties 
described.  Sal:  $75,000.  Contact: 
bhavya  @  itgroup-atl.com 


Consultant.  Design,  develop, 
implement  &  test  software  appli¬ 
cations  using  relational  database 
concepts.  Perform  database 
administration.  Tools:  Ingres; 
UNIX;  Openroad;  Open  VMS. 
Bachelor's  in  Comp.  Sci.’  +  2  yrs. 
exp.  in  job  offered  or  as  Database 
Administrator  req'd.  (’Will  accept 
Bachelor's  degree  in  any  engi¬ 
neering  field.)  Prior  exp.  or 
education  must  include:  Ingres; 
Unix.  40  hrs/wk,  9am-5pm, 
$62,605/yr.  Applicants  must  show 
proof  of  legal  authority  to  work 
in  the  U.S.  Send  2  copies  of 
resume  &  cover  letter  to  Illinois 
Dept,  of  Employment  Security, 
401  S.  State  St.-7  North,  Chicago, 
IL  60605.  Attn:  Leila  Jackson. 
Ref#  V-IL  30138-J.  Employer 
Paid  Ad.  No  calls. 


SOFTWARE  ENGINEER  to 
design,  develop,  test,  implement 
and  maintain  application  software 
in  2-  and  3-tier  client/server 
environment  for  the  telecommu¬ 
nication  industry  using  C,  C++, 
EJB,  Servlets,  Java,  CORBA, 
Orbix,  VisiBroker,  Navigator, 
CeCAF,  TCP/IP  Sockets,  Rational 
Rose,  Oracle  RDBMS,  Informix, 
Harvest,  CMVC  configuration 
management  tool.  Perl  and  Shell 
Script  under  windows  NT.  UNIX 
and  DOS  operating  systems.  Re¬ 
quire:  B.S.  degree  in  Computer 
Science,  an  Engineering  disci¬ 
pline,  or  a  closely  related  field 
with  five  years  of  progressively 
responsible  experience  in  the  job 
offered  or  as  a  Programmer/ 
Analyst  or  Programmer.  Extensive 
travel  on  assignment  to  various 
client  sites  within  the  U.S.  is 
required.  Competitive  salary 
offered.  Send  resume  to: Tillman 
T.  Everson,  President,  ProSoft, 
Inc.  123  Hilltop  Business  Center 
Drive,  Pelham,  AK  35124;  Attn: 
Job  VV 


ProgrammerAnalyst,40  hrs.per 
week, 8  a.m.  to  4.30  p.m.  Salary 
$59000  per  year  Job  duties: 
Documentation  of  standard 
problems,  resolution  to  hardware/ 
software  problems, responsible 
for  new  server  set  up,  conifgua- 
ration  and  integration.  Tools 
utilized:  HTML,  JavaScript,  Java, 
LotusNotes  4.6/5.0  with  Domino 
&  Script,  ODBC  connections, 
Access  7.0,  SQL  &  UNIX  Re¬ 
quires  a  Bachelor's  degree  in 
C.S.OR  Mng.Inf.Systems,  2 
years'  of  experience  in  job  offered. 
Applicant  must  possess  perma¬ 
nent  authority  to  work  in  U.S. 
Applicants  send  resume  with 
Social  Security  Number  to 
Indiana  Department  of  Work¬ 
force  Development,  1 0  N. Senate 
Ave.  Indianapolis,  IN  46204- 
2277  Attention:  Mr.Tim  Lawhorn, 
I.D.#8142485. 


PeopleSoft  Sr.  Consultant.  Duties: 
Analyze,  design,  develop,  cus¬ 
tomize  &  implement  software 
solutions  using  PeopleSoft  appl. 
Perform  appl.  design,  set-up  & 
testing  using  Peopletools  & 
Oracle.  Perform  troubleshooting 
of  system  &  provide  tech,  support 
incl.  hardware  &  software  arch, 
develop.,  network  develop.  & 
admin,  interface  develop. 
Requires:  B.S.  in  Comp,  or  Info. 
Sci.,  Eng.  or  related  field  &  3  yrs. 
exp.  in  the  job  offered  or  3  yrs. 
exp.  as  a  Software  Eng.  or 
Prog./Analyst.  Will  accept  any 
comb,  of  educ.  &  equiv.  to  a  B.S. 
degree.  Concurrent  exp.  must 
incl.:  3  yrs.  exp.  developing  & 
customizing  software  solutions  & 
3  yrs.  exp.  using  PeopleSoft. 
EOE.  40  hrs.wk.;  8:00  a.m.  to 
5:00  p.m.  Send  resume  (no  calls) 
to:  Diane  Tuccito,  AnswerThink, 
Inc.,  817  W.  Peachtree  St.,  Suite 
800,  Atlanta,  GA  30308. 


Programmer  Analyst  to  plan, 
develop,  test  &  document  com¬ 
puter  programs  in  client  /  server 
environment  using  knowledge  of 
Power  Builder,  C++,  Visual  C++, 
C,  Oracle  7. 0/8.0,  PL/SQL,  & 
Java  Script.  Must  have  B.S.  in 
Computer  Science,  Math,  Engi¬ 
neering,  or  related  field  +  2  yrs 
exp.  Frequent  travel.  $72K  / 
year.  Send  Resume  to  HR® 
VSoft  Corporation,  6455  East 
Johns  Crossing,  Suite  450,  Du¬ 
luth,  GA  30097. 


SENIOR  SOFTWARE  ENGI¬ 
NEER  to  design,  develop,  test, 
implement,  and  maintain  software 
for  sophisticated  computer  busi¬ 
ness  and  financial  applications 
in  a  client/server  environment 
using  Oracle,  PL/SQL,  Power¬ 
Builder  and  SQR  on  Windows 
NT  and  UNIX  operating  systems. 
Require:  Master’s  degree  in 
Computer  Science/Engineering, 
Business  Administration  or  a 
closely  related  field  with  four 
years  of  experience  in  the  job 
offered.  Extensive  travel  on 
assignment  to  various  client 
sites  within  the  U.S.  is  required. 
Competitive  salary  offered.  Send 
resume  to:  Sherry  D.  Lucki, 
President,  ABT  Solutions,  8517 
South  Park  Circle,  Suite  218, 
Orlando,  FL  32819;  Attn:  Job  RP. 


Fusion  Technology  Group,  Inc. 
provides  IT  consulting  services 
to  organizations.  We  have  imme¬ 
diate  requirements  for:- 
Unix  System  Administrators 
2+  years  experience  on  AIX/  HP- 
UX/Solaris  platforms.  Degree  in 
computer  science  or  equivalent 
experience.  Expertise  in  Perl, 
Shell  Scripting;  NIS/DNS/Web- 
Proxy  Server  configuration; 
backup  systems.  Database  &  NOS 
knowledge. 

System/Business  Analysts 
2+  years  experience  in  s/w 
systems  design  and  development. 
Technical  or  Management  Degree. 
Good  knowledge  of  business 
applications/  processes. 
Experience  with  ERP  products 
such  as  SAP  or  databases  such 
as  Oracle.  Programming  skills 
using  VB,  Java,  or  C,  C++,  VC++. 
Email  resumes  to  akoul  ©ftghome. 
com  or  fax  at  978-262-9069. 


Sr.  Oracle  Developer  sought  by 
Telecomm  co  for  Reston,  VA  & 
Des  Plaines,  IL.  Must  possess 
Bach,  degree  in  Comp  Sci/Comp 
Eng  or  reltd  field  &  2  yrs  exp 
in  Oracle  develpmnt.  Send 
resume  to:  WFI,  attn-HR-IMOD 
Recruiter,  4810  Eastgate  Mall, 
San  Diego,  CA,  92121:  email 
resume@wfinet.com: 
fax(509)694-6190 
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ways  been  a  number  of  tech¬ 
nology  announcements  at  CA 
World,  but  this  year  you’ll  find 
that  we’ll  also  have  a  lot  to  do 
with  the  customer.  We  have 
our  current  crop  of  customer 
surveys  being  wrapped  up; 
we’re  going  to  talk  about  them 
more  openly  with  our  cus¬ 
tomers.  We  have  absolutely  fo¬ 
cused  on  the  customer  being 
No.  1. 1  have  said  clearly,  it  will 
make  or  break  careers  in  our 
company.  We  have  not  used 
those  words  before. 

To  what  do  you  attribute  CA’s  long 
tradition  of  having  combative  rela¬ 
tionships  with  its  customers?  What 
does  it  stem  from?  No.  1,  from  ac¬ 
quisitions.  They  have  been  a 
great  thing,  and  they  have  also 
been  a  thing  that  has  intro¬ 
duced  its  fair  share  of  con¬ 
tention.  Why?  You’re  the  end 
user.  You  bought  fa  product 
from  a  CA  competitor].  One 
weekend,  two  guys  did  a  deal, 
and  the  next  thing  you  know, 
the  product  that  you  chose 
over  the  other  guy’s  is  now 
owned  by  the  other  guy.  Huge 
problems. 

No.  2,  we  clearly  have  had  a 
long-standing  policy  of  restruc¬ 
turing  the  acquired  company 
immediately.  We  have  taken  the 
big-bang  approach  —  we  cut 
upfront,  and  [we’re]  done.  We 
have  never  had  a  second  cut  in 
any  acquisition.  But,  let’s  face  it, 
in  one  day,  there  are  hundreds 
of  people  who  have  left  the 
company.  Some  don’t  have  nice 
things  to  say  about  you;  some 
go  to  work  for  competitors. 
Competitors  hire  them  en 
masse  to  create  a  force  to  com¬ 
pete  against  CA.  That’s  how 
Legent  [Corp.]  was  created. 
And  Legent  went  around  and 
said,  “We’re  the  alternative.” 
Well,  it  didn’t  work  out  that 
way,  [and  CA  acquired  Legent]. 
That  wasn’t  a  hostile  deal.  It 
was  a  friendly  deal  —  they 
wanted  out.  Platinum  [Technol¬ 


ogy  International  Inc.,  which 
CA  also  acquired]  was  the  same 
way  —  they  were  in  trouble. 

Platinum  was  an  interesting  case, 
because  some  Platinum  customers 
had  it  written  into  their  contracts 
that  they  would  be  paid  up  to  three 
times  the  value  of  their  contracts  if 
Platinum  was  ever  acquired  by  CA. 
And  we  didn’t  pay  a  single  per¬ 
son  —  not  a  single  one.  The 
reason  is,  every  customer  has 
come  to  us  and  said  that’s  not 
the  basis  on  which  they  want 
to  do  business.  [For]  one  of 
them,  the  amount  was  over  $75 
million.  Admittedly,  we’ve  had 
a  few  discussions.  Not  every 
one  has  been  an  easy  thing. 

What,  in  your  view,  is  the  concern 
that  these  companies  had  about  an 
acquisition  by  CA  in  the  first  place? 

It’s  the  momentum  that  people 
create.  You  have  Legent  going 
out  and  saying,  “CA  buys  the 
products,  they  milk  them,  they 
don’t  enhance  them,  they  fire 


everybody.”  Platinum  comes  in 
and  says,  “We’re  the  alterna¬ 
tive  to  CA,  we’re  kinder,  we’re 
gentler,  we’re  different.”  It’s 
the  perception  you  paint  in  the 
marketplace.  And  let’s  face  it, 
we  were  not  very  savvy  and 
not  very  smooth  in  how  we 
dealt  with  the  press  and  with 
the  market. 

The  other  dark  side  that  peo¬ 
ple  don’t  talk  about  —  take,  for 
example,  Platinum.  Platinum 
had  technology  they  were  sell¬ 
ing  for  which  there  were  no 
software  developers  working  on 
them.  Platinum  had  layoffs,  and 
Legent  had  some  cuts  before  we 
bought  them  —  they’ve  all  had 
some  cuts.  The  products  were 
frozen.  So  we  pick  them  up,  we 
publish  a  nice  little  white  paper 
because  everybody  wants  to 
know  what’s  happening.  I  point 
out  in  the  white  paper  that  the 
product  ain’t  going  anywhere. 
And  people  go,  “That  son  of  a 
bitch.”  This  is  what  happens. 
That’s  a  tough  hurdle. 


Have  you  learned  any  more  about  the 
recently  initiated  federal  investiga¬ 
tions  into  CA’s  changes  to  its  finan¬ 
cial  reporting  practices  since  you  in¬ 
formed  the  news  media  on  Feb.  22 
that  you  were  unaware  of  the  details 
of  those  investigations?  We  have 
had  some  dialogue  with  the 
[Securities  and  Exchange  Com¬ 
mission]  and  the  U.S.  attorney’s 
office.  I’m  being  mindful  of 
their  need  to  do  whatever 
they’re  going  to  do.  But  I  will 
tell  you  that  whatever  they 
have  going  on  is  very  prelimi¬ 
nary.  We  still  have  not  been 
asked  for  any  information.  The 
issues  I  think  they’re  interested 
in  have  been  issues  that  have 
been  the  subject  of  many  news¬ 
paper  articles  over  time.  Our 
job  is  to  work  with  these  folks, 
to  help  them  understand  what 
the  issues  are,  and  I  believe 
they’ll  go  away  and  we’ll  be  vin¬ 
dicated.  Customers  have  been 
very  supportive. 

How  difficult  has  this  year  been  for 


you,  having  dealt  with  the  proxy 
fight  to  unseat  your  board  of  direc¬ 
tors  last  summer  and  now  all  of 
this?  The  proxy  fight  was  a 
very  difficult  time  for  me  per¬ 
sonally,  but  it  was  a  time  where 
we  had  to  get  out  and  commu¬ 
nicate  more.  It  forced  us  to  do 
things  that  we  historically  had¬ 
n’t  done  before.  We  generally 
have  not  been  big  to  get  out 
and  communicate  with  people, 
and  the  proxy  forced  us  to  do 
it.  So,  while  it  was  a  difficult 
experience  and  a  difficult  time, 
I  think  we  learned  a  lot  from  it 
and  we  came  out  stronger. 

This  will  do  the  same  for  us. 
There’s  a  lot  of  anger  in  the 
company  about  being  poked 
and  prodded  right  now.  As  a 
management  team,  we’re  work¬ 
ing  on  channeling  that  anger  to 
delivering  strong  results.  I 

For  the  complete 
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Users  face  ever-increasing 
complexity  with  the  prolifera¬ 
tion  of  storage  technologies 
such  as  storage-area  networks 
and  the  new  high-speed  Infini¬ 
Band  connectivity  standard, 
according  to  Russell  Artzt,  a 
CA  co-founder  and  executive 
vice  president  who’s  now  in 
charge  of  the  BrightStor  stor¬ 
age  line.  The  new  BrightStor 
portal  will  help  users  manage 
heterogeneous  storage  proto¬ 
cols  (such  as  Fibre  Channel 
and  SCSI),  processes  and  ven¬ 
dor  hardware  in  their  enter¬ 
prises,  Artzt  said. 

Sanjay  Kumar,  CA’s  presi¬ 
dent  and  CEO,  said  the  effort 
was  user-driven.  “Customers 
want  to  look  at  storage  not  as 
MVS  storage  or  Unix  storage 
or  [Windows]  NT  storage;  they 
want  to  look  at  storage  as  stor¬ 
age,”  Kumar  said.  “Large  cus¬ 
tomers  said  they  wanted  us  to 


pull  these  products  together 
and  allow  them  to  have  one 
view  of  storage,  which  we  had 
done  in  enterprise  manage¬ 
ment,  so  it’s  a  natural  thing  for 
us.  We  almost  fell  into  it.” 

Rather  than  make  users  navi¬ 
gate  multiple  screens  to  do 
things  like  access  data  on  the 
performance  of  individual  de¬ 
vices  or  applications,  CA  plans 
to  allow  them  to  manage  and 
monitor  their  storage  re¬ 
sources  centrally  through  its 
customizable  BrightStor  portal. 
Users  will  be  able  to  perform 
tasks  such  as  checking  into 
backup  operations  run  by  CA’s 
or  other  vendors’  applications 
or  viewing  the  health  of  IBM  or 
EMC  Corp.  storage  hardware. 

In  the  same  vein,  CA  will  also 
announce  at  CA  World  in  Or¬ 
lando  April  21-25  a  security 
management  portal,  said  Simon 
Perry,  vice  president  of  security 
solutions  at  CA.  The  portal  will 
let  users  manage  their  intru¬ 
sion-detection,  antivirus,  policy 
compliance  and  other  Web- 
based  security  applications 


from  one  point,  said  Perry. 

Several  users  expressed  in¬ 
terest  in  both  products.  With¬ 
out  having  seen  the  portal,  Jeff 
Rhoads,  manager  of  enterprise 
systems  management  at  Sallie 
Mae  Inc.  in  Reston,  Va.,  sug¬ 
gested  that  it  could  be  just  the 
thing  to  simplify  administra¬ 
tion,  which  he  said  accounts 
for  60%  of  the  workload  for  his 
IT  security  personnel. 

Currently,  just  adding  a  user 
to  the  Sallie  Mae  network  re¬ 
quires  accessing  about  a  dozen 
security  applications  for  things 
like  password  activation.  Sallie 
Mae’s  objective  is  to  build  “an 
interface  where  one  system 
can  control  all  that  access,” 
Rhoads  said. 

CA  isn’t  alone.  IBM’s  Tivoli 
division  said  it  already  offers 
portal  products  for  access  man¬ 
agement  and  to  coordinate  se¬ 
curity-related  data  generated 
from  antivirus,  intrusion-detec¬ 
tion  and  other  applications. 

It  particularly  behooves  CA 
to  offer  a  single  interface  to 
manage  the  various  storage 


products  it  has  acquired  over 
the  years,  said  James  Governor, 
an  analyst  at  Illuminata  Inc.  in 
Nashua,  N.H.  Companies  can’t 
keep  building  new  front  ends 
as  they  add  storage  and  securi¬ 
ty  applications,  said  Governor, 
and  the  portal  gives  them  a 
simple  way  of  adding  software 
without  rebuilding  the  inter¬ 
face.  Moreover,  with  the  grow¬ 
ing  complexity  of  storage  net¬ 
works,  storage  managers  need 
to  have  their  own  dedicated 
management  tools,  just  as  en¬ 
terprise  network  software 
managers  do,  he  said. 

Governor  suggested  that  one 
sticking  point  with  the  security 
portal  may  be  that  companies 
may  not  want  any  one  individ¬ 
ual  to  have  central  control  of 
the  security  network.  “I’m  not 
sure  the  market  is  ready  for 
that,  but  it’s  great  the  tools  are 
there,”  he  said.  I 

To  read  what  cus- 
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Best  Practice?  Nope 

LET’S  SAY  YOU  SPOT  A  HOUSE  THAT’S  ON  FIRE,  and 

you  call  the  fire  department.  How  long  should  it  take  the 
fire  department  to  answer  the  phone?  A  few  seconds?  A 
minute?  Or  suppose  you  find  a  ticking  bomb  and  call  the 
police.  How  long  should  you  have  to  wait  on  hold  before 
you  can  report  it?  A  minute?  Two?  Five? 

How  about  a  week? 

Late  last  month,  two  security  researchers  proposed  that  when  a 
software  vendor  is  informed  of  a  security  hole,  the  vendor  should 


have  seven  days  just  to  acknowledge  being  noti¬ 
fied.  Not  to  fix  it  or  discuss  it  —  just  to  say,  “I 
got  your  message.” 

And  then,  according  to  the  “best  practices” 
proposal  submitted  to  the  Internet  Engineering 
Task  Force  (IETF),  the  vendor  should  fix  the 
problem  within  30  days  —  that  is,  unless  the 
vendor  gets  a  “grace  period  extension”  from  the 
person  reporting  the  problem. 

Let’s  translate  that  into  plain  English:  Accord¬ 
ing  to  these  best  practices,  vendors  can  spend  a 
week  pretending  they  haven’t  heard  anything 
about  a  problem  and  then  as  much  extra  time 
beyond  30  days  as  they  can  get  by  arm-twisting, 
cajoling,  browbeating  or  threatening  whoever 
reported  the  problem. 

Sure,  that  person  can  always  go  public  with 
the  information  —  and  risk  being  stomped  into 
a  greasy  spot  on  the  pavement  by  a  platoon  of 
the  vendor’s  lawyers. 

Best  practice?  It  sure  sounds  good  for  ven¬ 
dors  —  but  not  for  anyone  else. 

Steve  Christey  of  The  Mitre  Corp.  and  Chris 
Wysopal  of  @stake  Inc.  should  know  better. 
They’re  certainly  not  naive.  Their  proposal 
spells  out  the  varying  motives  and  options 
that  both  vendors  and  bug  reporters  may  have 
(read  it  yourself  at  www.ietf.org/ 
internet-drafts/draft-christey- 
wysopal-vuln-disclosure-OO.txt ). 

So  why  give  vendors  a  week  just 
to  check  their  mail?  Especially 
considering  that  Wysopal’s  own 
company,  @stake,  has  a  policy  on 
dealing  with  security  holes  that 
gives  vendors  just  two  business 
days  to  respond  and  two  weeks  to 
fix  the  problem? 

Maybe  Christey  and  Wysopal 
thought  they  needed  a  looser  policy 
to  make  it  more  palatable  as  an 
IETF  standard. 


If  that’s  what  they  were  thinking,  they  weren’t 
thinking  it  through. 

A  best  practices  document  from  the  IETF 
won’t  be  treated  as  the  lower  limit  of  what  a 
vendor  should  do.  It  will  be  treated  as  the  up¬ 
per  limit  of  what  a  vendor  is  required  to  do. 
That  means  this  standard  should  be  as  tough 
as  possible  —  not  watered  down 

Even  then,  a  best  practices  standard  can’t  be 
used  to  force  a  vendor  to  do  anything.  But  it  can 
be  pointed  to  by  a  vendor’s  lawyers  if  they 
claim  that  a  bug-finder  damaged  the  vendor’s 
business  by  going  public  instead  of  granting 
endless  extensions. 

So  because  the  IETF  is  a  recognized  stan¬ 
dards  body,  a  lame  set  of  so-called  best  prac¬ 
tices  actually  gives  vendors  one  more  thing  to 
hide  behind  if  they  want  to  drag  their  feet  and 
dodge  responsibility  or  even  threaten  the  peo¬ 
ple  who  find  bugs. 

If  that’s  what  this  best  practices  standard 
does,  we’re  better  off  without  it. 

Too  many  software  vendors  already  treat  a 
security  hole  mainly  as  a  public  relations  prob¬ 
lem.  They  dodge,  they  deny,  they  delay  —  and 
all  the  while,  IT  people  are  the  ones  facing  the 
consequences. 

We  need  vendors  to  treat  a  secu¬ 
rity  hole  like  a  burning  house  or  a 
time  bomb  that  could  go  off  at  any 
second.  In  other  words,  like  a  real 
threat. 

But  that  will  only  happen  because 
of  real  pressure  from  customers  and 
security  experts  and,  yes,  organiza¬ 
tions  like  the  IETF. 

So  if  the  IETF  wants  to  define 
how  to  deal  with  security  holes,  let’s 
just  be  sure  it’s  lighting  a  fire  under 
the  people  who  should  fix  them  — 
and  not  letting  the  house  burn 
down.  I 


frank  haves,  Computer- 
world's  senior  news  colum¬ 
nist,  has  covered  IT  for  more 
than  20  years.  Contact  him  at 

frank.hayes@computerwortd.com. 


INSTALL  program  for  this  piece 
of  company  software  isn’t  work¬ 
ing  properly,  so  pilot  fish  calls 
the  help  desk.  “Model  number?” 
tech  asks.  IBM  Model  6887, 
says  fish.  “I  don't  know  what  a 
6887  is,"  says  tech.  “Well,  on 
the  front  it  says,  ‘IBM  Personal 
Computer  750,’  ”  fish  reports. 
“Sorry,  we  can’t  help  you  with  a 
personal  computer;  this  number 
is  only  for  support  of  company 
computers.”  Click! 

WHEN  NETWORK  communi¬ 
cations  fail  between  this  big 
construction  project  in  the 
Caribbean  and  engineering 
company’s  stateside  headquar¬ 
ters,  stateside  boss  screams  at 
on-site  pilot  fish  to  find  the  prob¬ 
lem  and  fix  it,  now!  After  days  of 
troubleshooting  with  island’s 
telecommunications  providers, 
fish  locates  the  point  of  failure: 
“Stateside  headquarters  is 
incommunicado,”  he  reports, 
“because  its  equipment  is  under 
four  feet  of  water  from  a  flood.” 

GENERAL  FAILURE  error 
message  flashes  each  time  user 
at  this  remote  office  turns  on  his 
PC,  so  support  pilot  fish  asks 


him  to  send  it  back  to  head¬ 
quarters.  But  only  the  monitor 
arrives.  Fish  calls  and  asks,  Why 
didn’t  you  send  the  CPU?  Says 
user,  "Well,  the  monitor  was  the 
only  one  showing  the  error.” 

AFTER  A  failed  security  audit,  IT 
consultant  pilot  fish  is  going  over 
the  results  with  a  senior  systems 
manager.  “Using  ‘normanl’  as  a 
password  would  be  a  bad  idea,” 
fish  points  out.  “It’s  like  using 
your  date  of  birth  for  your  bank 
card  PIN.”  Replies  manager, 
“What’s  wrong  with  that?" 

JOB  INTERVIEW  with  a  con¬ 
tract  IT  outfit  goes  well  for  this 
pilot  fish  -  but  then  she  hears 
from  the  outraged  people  whose 
names  she  gave  as  references, 
all  of  whom  were  contacted  by 
the  prospective  employer.  “They 
used  my  name  as  a  hook,”  fish 
says,  “and  then  tried  to  sell  them 
services!” 

I  won't  sell  you  out:  sharky® 
computerworld.com.  You 
score  a  snazzy  Shark  shirt  if  your 
true  tale  of  IT  life  sees  print  -  or 
if  it  shows  up  in  the  daily  feed  at 
computerworld.com/sharky. 


The  5th  Wave 


“And  tell  David,  to  come  in  out  o£  the 
hail.  1  found  a  viatf  to  adjust  our  piqject 
budget  estimate." 


Here  are  three-hundred-eighty-nine- 
thousand-four-hundred  and  thirty-four 


reasons  why  you'll  thank  HP  for  building  the  Superdome 
server.  That's  the  number  of  transactions  per 
minute  if  recorded,  according  to  the  latest  TPC-C 
benchmark  results.  You'll  appreciate  how  much 
more  productive  you  can  be  with  a  UNIX®  server 
that's  76%  faster  than  IBM's  highest  published 
non-clustered  TPC-C  result.  That's  fast  enough  to 
satisfy  even  your  most  demanding  IT  manager. 
And  your  CFO  will  relish  Superdome's  price/ 
performance  ratio  of  $21 .24  per  transaction. 

HP's  Superdome  server  will  have  you 
handling  more  applications,  not  only  faster,  but 
more  reliably.  It's  designed  with  your  always-on 
Internet  infrastructure  in  mind,  so  you'll  be 
working  on  multiple  projects,  across  multiple 
platforms,  with  ease.  Superdome  is  equipped  to 
handle  the  Intel®  Itanium'"  processor  architecture, 
which  HP  co-developed.  This  breakthrough 
technology  blends  high  volume  with  high 
performance,  and  it  will  keep  you  poised  for 
seamless  upgrades.  We  could  give  you  a  million 
more  reasons.  But  why  take  our  word  for  it? 
Check  the  Top  500  Supercomputer  Site  list. 

Infrastructure:  it  starts  with  you. 


Find  out  how  Superdome  is 
helping  Amazon.com  dramatically 
increase  their  performance.  Visit 
www.hp.com/large/ superdome 
for  your  copy  of  The  HP  Superdome 
Advantage  resource  guide. 

Or  call  1  -800-HP-ASK-ME 


invent 


HP's  TPC-C  benchmark  of  389,434  transactions  per  minute  was  achieved  on  a  64-way  PA  8700  Superdome  running  Oracle9i  Database.  As  an  OLTP  system  benchmark,  TPC-C  simulates  a  complete  environment  and  is  modeled  after 
actual  production  applications  and  environments  rather  than  stand-alone  computer  tests  which  don't  evaluate  key  performance  factors  (for  example,  disk  I/Os,  data  storage,  backup  and  recovery  user  interface,  and  communications). 
Price  performance  of  $21.24/tpmC.  TPC-C  is  a  copyright  of  the  Transaction  Processing  Performance  Council.  Further  TPC-C  information  is  available  from  http://www.tpc.org.  IBM's  TPC-C  result,  available  4/13/200),  is  220,807 
transactions  per  minute  running  on  a  IBM  P680  running  Oracle  8i,  with  price  performance  of  $34.18/tpmC.  Oracle  is  a  registered  trademark;  Oracle8i  and  Oracle9i  are  trademarks  or  registered  trademarks  of  Oracle  Corporation 
Itanium  is  a  trademark  of  Intel  Corporation.  UNIX  is  a  registered  trademark  of  The  Open  Group.  Amazon.com  is  a  trademark  or  registered  trademark  of  Amazon.com,  Inc.  Total  system  availability  date,  May  15,  2002,  hardware 
available  now.  Limit  one  HP  Superdome  Advantage  resource  guide  per  customer.  Allow  6  to  8  weeks  for  delivery.  ©2002  Hewlett-Packard  Company.  All  rights  reserved. 


SO  RELIABLE, 
IT’S  THE 
LEADINQ 
DATABASE 
IN  HEALTHCARE 


More  hospitals  around  the  world  are  running 
their  "life-or-death"  applications  on  Cache 
than  on  any  other  database  system. 

With  proven  reliability  like  this,  you  should 
consider  Cache  for  your  critical  applications. 

With  its  lightning  speed  and  massive  scalability, 
the  performance  of  Cache  makes  it  a  perfect 
match  for  any  enterprise,  in  any  industry,  with  a 
requirement  for  fast  transaction-processing 
applications  capable  of  scaling  to  tens  of 
thousands  of  users. 

Cache  uniquely  combines  robust  object  and 
relational  technologies,  coupled  to  a  multi¬ 
dimensional  data  engine.  Plus,  it  includes  a  rapid 
Web  application  development  environment. 

Cache  is  backed  by  24x7  support  from 
InterSystems  -  a  leader  in  high  performance 
databases  for  23  years,  with  4,000,000  users* 
worldwide  in  healthcare,  financial  services  and 
other  industries. 

InterSystems  f 

£  CACHE 

Make  Applications  Faster 


Download  Cache  for  free  or  request  it  on  CD  at  www.lnterSystems.com 

*  InterSystems'  database  technology  is  used  by  Ameritrade,  Hitachi,  Johns  Hopkins,  Kennedy  Space  Center. 
Paine  Webber,  Pepsi  Cola,  Prudential  Insurance  Co.,  Shell,  U.S.  Army,  World  Bank  and  other  successful  enterprises. 

O  2001  InterSystems  Corporation.  All  right*  reserved.  Inter  System*  Cache  i*  a  registered  trademark  of  InterSystems  Corporation. Other  product  names  are  trademarks  of  their  respective  vendors.  34-2 
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